NSE Threat Analysis & Vulnerability Management 2

Question 1

Which CVSS v3 metric indicates whether a vulnerability can be exploited without any authentication?

Accepted Answer

Privileges Required: None

Answer

The Privileges Required metric set to None means the attacker requires no authentication to exploit the vulnerability.

Question 2

In threat intelligence, what does the term 'TTP' stand for?

Accepted Answer

Tactics, Techniques, and Procedures

Answer

TTPs describe how threat actors operate, covering their Tactics (goals), Techniques (methods), and Procedures (specific implementations).

Question 3

A security team discovers a publicly disclosed vulnerability with no vendor patch available. This is best described as a:

Accepted Answer

Zero-day vulnerability

Answer

A zero-day is a vulnerability that is publicly known (or actively exploited) but has no official vendor patch available.

Question 4

Which threat modeling methodology uses the acronym STRIDE to categorize threats?

Accepted Answer

Microsoft Threat Modeling

Answer

Microsoft's Threat Modeling methodology introduced STRIDE, which categorizes threats as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

Question 5

What is the primary purpose of a vulnerability scanner in an NSE environment?

Accepted Answer

Identify and report known weaknesses in systems and applications

Answer

Vulnerability scanners enumerate hosts and compare their configurations and software versions against known vulnerability databases to report weaknesses.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Threat Analysis & Vulnerability Management 2