Q. What is the primary purpose of adjusting scan sensitivity settings in vulnerability scans?

View solution

Q. What is typically the starting point for administrators when creating a new vulnerability scan?

View solution

Q. How can administrators improve the efficiency of their vulnerability scans?

View solution

Q. What does disabling unnecessary plug-ins in vulnerability scans help with?

View solution

Q. What is a potential issue with some plug-in scan tools on fragile production systems?

View solution

Q. What is one way to avoid causing problems on the organization's network when running scans on fragile systems?

View solution

Q. Why might penetration testers use stealth scans during a penetration test?

View solution

Q. What is a limitation of basic vulnerability scans that run over a network?

View solution

Q. What is a characteristic of container technology in IT organizations?

View solution

Q. How can administrators gather trusted information about server configurations in vulnerability management solutions?

View solution

Q. What advantage do credentialed scans have over noncredentialed alternatives in vulnerability management programs?

View solution

Q. In which type of penetration test is it generally appropriate to use credentialed vulnerability scans?

View solution

Q. What should penetration testers consider when choosing the appropriate scan perspectives for a penetration test?

View solution

Q. What does an external scan in vulnerability management provide?

View solution

Q. Why is regular maintenance of a vulnerability scanner important?

View solution

Q. What does regular patching of scanner software help protect against?

View solution

Q. How often should administrators configure their scanners to retrieve new plug-ins?

View solution

Q. What is the purpose of the Security Content Automation Protocol (SCAP)?

View solution

Q. Which SCAP component provides a standardized approach for measuring and describing the severity of security-related software flaws?

View solution

Q. According to Veracode's 2020 metrics, what percentage of scanned applications did not pass their OWASP Top 10 security issues testing process?

View solution