eJPT Vulnerability Assessment 3

Question 1

When using OpenVAS (Greenbone), what is the first step before running a vulnerability scan?

Accepted Answer

Create a target and select a scan configuration

Answer

In OpenVAS/Greenbone, you must first define a target (IP/host) and choose a scan configuration before initiating any vulnerability scan.

Question 2

Which vulnerability is associated with the CVE-2014-0160 identifier?

Accepted Answer

Heartbleed

Answer

CVE-2014-0160, known as Heartbleed, is a critical OpenSSL vulnerability that allows attackers to read memory from affected servers.

Question 3

A scan reveals a service banner showing 'Apache/2.2.8'. What is the most significant security concern?

Accepted Answer

This is an outdated version with known vulnerabilities

Answer

Apache 2.2.8 is a very old version with numerous known CVEs; the version disclosure allows attackers to identify and target specific vulnerabilities.

Question 4

During vulnerability assessment, which port is associated with the default Microsoft RDP service?

Accepted Answer

3389

Answer

Remote Desktop Protocol (RDP) runs on TCP port 3389 by default, making it a common target for vulnerability assessment on Windows systems.

Question 5

What is the significance of identifying end-of-life (EOL) software during a vulnerability assessment?

Accepted Answer

EOL software no longer receives security updates, leaving vulnerabilities permanently unpatched

Answer

End-of-life software no longer receives vendor patches, meaning any discovered vulnerabilities will remain permanently exploitable.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test