eJPT Vulnerability Scanning 2

Question 1

Which Nmap script category is most useful for identifying known vulnerabilities during a scan?

Accepted Answer

vuln

Answer

The 'vuln' script category in Nmap runs scripts specifically designed to check for known vulnerabilities on target services.

Question 2

What does the term 'false positive' mean in the context of vulnerability scanning?

Accepted Answer

A reported vulnerability that does not actually exist

Answer

A false positive occurs when a scanner reports a vulnerability that is not actually present on the target system.

Question 3

Which OpenVAS component is responsible for executing the actual vulnerability tests against targets?

Accepted Answer

OpenVAS Scanner

Answer

The OpenVAS Scanner daemon (ospd-openvas) executes the Network Vulnerability Tests (NVTs) against target hosts.

Question 4

When scanning for vulnerabilities on a web application, which tool is specifically designed for this purpose?

Accepted Answer

Nikto

Answer

Nikto is a web server scanner that checks for dangerous files, outdated software, and common web vulnerabilities.

Question 5

What is the primary difference between a credentialed and a non-credentialed vulnerability scan?

Accepted Answer

Credentialed scans use valid login credentials to access the system internally, finding more vulnerabilities

Answer

Credentialed scans authenticate to the target system, enabling deeper inspection of installed software, configurations, and patches that external scans cannot see.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Vulnerability Scanning 2