Vulnerability Assessment Flashcards
6 cards from real CSOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Vulnerability Assessment flashcards as text
What is the purpose of a 'scope' definition in a penetration test engagement?
Answer: To define which systems, networks, and methods are authorised for testing, protecting both the tester and the organisation from unintended harm
Defining the scope of a penetration test establishes clear boundaries for what is authorised. It protects systems outside the scope from accidental disruption and ensures the tester has legal authorisation for the activities performed.
What is a 'grey box' penetration test?
Answer: A test where the tester is given partial knowledge of the target system, simulating an attacker with some internal information
In a grey box penetration test, the tester has partial knowledge of the target environment — such as network diagrams or limited credentials — simulating a scenario where an attacker has obtained some insider information.
What is the purpose of a vulnerability disclosure process?
Answer: A structured process for security researchers to report discovered vulnerabilities to affected vendors so they can be fixed before public disclosure
Vulnerability disclosure (often called coordinated or responsible disclosure) is the process by which researchers notify affected vendors of vulnerabilities, giving them time to develop and release patches before the vulnerability is publicly disclosed.
What is a 'red team' exercise in the context of cybersecurity?
Answer: A team of security professionals who simulate real-world attackers to test an organisation's defences holistically, including technical, physical, and social engineering tactics
A red team engagement uses ethical hackers to simulate realistic, sophisticated adversaries attacking an organisation across multiple dimensions — technical, physical, and human. This tests the full spectrum of defences in a way that individual penetration tests do not.
What is the Common Vulnerabilities and Exposures (CVE) system?
Answer: A publicly maintained list of known cybersecurity vulnerabilities with unique identifiers, enabling consistent reference across security tools and databases
CVE is a global, publicly maintained list of known cybersecurity vulnerabilities, each assigned a unique CVE identifier. This standardises vulnerability referencing across different tools, vendors, and databases, enabling consistent communication about specific vulnerabilities.
After identifying a critical vulnerability during an assessment, what is the recommended immediate action?
Answer: Notify the asset owner immediately and recommend temporary mitigations while a permanent patch is developed or deployed
Critical vulnerabilities require immediate notification to the asset owner and, where possible, implementation of temporary mitigations to reduce exposure while a permanent fix is prepared. Balancing urgency with operational continuity is key.