NSE Threat Analysis & Vulnerability Management

Question 1

What is the main purpose of vulnerability scanning?

Accepted Answer

To identify and assess system vulnerabilities

Answer

To install security updates.

Answer

To detect unauthorized users.

Answer

To block malware automatically.

Question 2

Which tool is commonly used for vulnerability assessments?

Accepted Answer

Nessus

Answer

Wireshark

Answer

Putty

Answer

Syslog

Question 3

What does CVSS stand for?

Accepted Answer

Common Vulnerability Scoring System

Answer

Common Vulnerability Security Standard

Answer

Critical Vulnerability Score System

Answer

Computer Virus Severity Scale

Question 4

Which phase comes after identifying a vulnerability?

Accepted Answer

Risk analysis

Answer

Mitigation

Answer

Patching

Answer

Reporting

Question 5

Which of the following is a threat vector?

Accepted Answer

Phishing email

Answer

Firewall

Answer

Patch update

Answer

Encrypted traffic

Question 6

What is the difference between vulnerability and threat?

Accepted Answer

A vulnerability is a weakness and a threat is the danger

Answer

There is no difference.

Answer

A threat is a weakness and a vulnerability is the danger.

Answer

They are both malware types.

Question 7

Which database provides vulnerability information?

Accepted Answer

NVD

Answer

CISA

Answer

FDA

Answer

WHO

Question 8

What is zero-day vulnerability?

Accepted Answer

A vulnerability not yet known to the vendor or public

Answer

A vulnerability that is 0 bytes in size.

Answer

A vulnerability known by the vendor for over a year.

Answer

A vulnerability discovered and patched immediately.

Question 9

Which practice reduces the chance of exploitation?

Accepted Answer

Regular patching and updates

Answer

Allowing user admin access

Answer

Disabling firewalls

Answer

Delaying updates