CVA Vulnerability Assessment Tools & Techniques

Question 1

What is the primary purpose of a vulnerability scanner?

Accepted Answer

Identify potential security weaknesses

Answer

Install antivirus programs.

Answer

Boost system speed.

Answer

Provide hardware upgrades.

Question 2

Which tool is commonly used for network vulnerability scanning?

Accepted Answer

Nessus

Answer

Wireshark.

Answer

Photoshop.

Answer

Excel.

Question 3

What does a false positive in a vulnerability scan indicate?

Accepted Answer

A vulnerability was wrongly identified

Answer

A real vulnerability was missed.

Answer

A new device was detected.

Answer

A system upgrade occurred.

Question 4

Which technique helps validate vulnerabilities found by automated tools?

Accepted Answer

Manual verification

Answer

Ignore the findings.

Answer

Reboot the server.

Answer

Install more scanning tools.

Question 5

What is the first phase in a vulnerability assessment process?

Accepted Answer

Planning and scoping

Answer

Reporting.

Answer

Patch management.

Answer

System hardening.

Question 6

Which method identifies vulnerabilities without disrupting services?

Accepted Answer

Non-intrusive scanning

Answer

Penetration testing.

Answer

System rebooting.

Answer

Service termination.

Question 7

What is patch management's role in vulnerability assessment?

Accepted Answer

Fix vulnerabilities by applying software updates

Answer

Delay updating software indefinitely.

Answer

Promote new product launches.

Answer

Increase system downtime.

Question 8

Which type of scan involves simulating an attack to find vulnerabilities?

Accepted Answer

Penetration testing

Answer

Non-intrusive scanning.

Answer

Compliance auditing.

Answer

Network mapping.

Question 9

Why is prioritizing vulnerabilities important?

Accepted Answer

Critical vulnerabilities are fixed first

Answer

All vulnerabilities are equal.

Answer

Minor issues should always come first.

Answer

Cost-saving is prioritized over security.