Vulnerability Scanning and Exploitation Quiz

What is the purpose of vulnerability scanning?

• To exploit vulnerabilities in a system

• To assess computers, networks, or applications for known vulnerabilities

• To perform social engineering attacks

• To create network diagrams

Which of the following is a definition of a vulnerability according to NIST?

• A flaw in a system's design that cannot be exploited

• A weakness in an information system that could be exploited by a threat source

• A type of software bug that is harmless

• A method of securing a network

What is a zero-day vulnerability?

• A vulnerability that affects only hardware

• A vulnerability that has been patched

• A newly discovered vulnerability with no remediation

• A vulnerability that is easy to exploit

What does the Common Vulnerability Scoring System (CVSS) assess?

• The cost of fixing vulnerabilities

• The effectiveness of security policies

• The severity of computer system security vulnerabilities

• The number of vulnerabilities in a system

Which of the following is NOT a type of vulnerability scanning?

• Authenticated scans

• Unauthenticated scans

• Network scans

• Service Enumeration

Which of the following is an example of a software vulnerability?

• Social engineering

• Hardware design flaw

• Network misconfiguration

• Buffer overflow

What is the main goal of an attack using an exploit?

• To gather information about the system

• To gain access to a system or data

• To create a network diagram

• To perform vulnerability scanning