eJPT Vulnerability Scanning 3

Question 1

In Nessus, what is a 'plugin' used for?

Accepted Answer

A script that checks for a specific vulnerability or configuration issue

Answer

Nessus plugins are individual test scripts, each targeting a specific vulnerability, misconfiguration, or information-gathering check.

Question 2

Which scanning technique sends packets and waits for responses to determine if a port is open, without completing the TCP handshake?

Accepted Answer

SYN Scan (Half-open)

Answer

A SYN scan (half-open scan) sends a SYN packet and analyzes the response without completing the three-way handshake, making it stealthier.

Question 3

What does CVSS stand for in vulnerability management?

Accepted Answer

Common Vulnerability Scoring System

Answer

CVSS stands for Common Vulnerability Scoring System, providing a standardized method to rate the severity of security vulnerabilities.

Question 4

Which of the following is a key risk of running an aggressive vulnerability scan against a production system?

Accepted Answer

Scan probes may crash unstable services or cause denial of service

Answer

Aggressive scans send many packets rapidly and some intrusive checks can destabilize vulnerable services, causing outages on production systems.

Question 5

What is the purpose of a vulnerability scan policy or template in tools like Nessus?

Accepted Answer

To define the scope, plugins, and settings used during a scan

Answer

Scan policies or templates configure which plugins run, scan speed, credentials, and port ranges, tailoring the scan to a specific use case.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test