Welcome to the Vulnerability Scanning MCQs Page

Dive deep into the fascinating world of Vulnerability Scanning with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Vulnerability Scanning, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Vulnerability Scanning, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Vulnerability Scanning. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Vulnerability Scanning. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Vulnerability Scanning MCQs | Page 11 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Analyzing Vulnerability Scans

05

Exploiting and Pivoting 🔒

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q101.

What should penetration testers carefully define in penetration test SOWs regarding vulnerabilities detected during tests?

Scan frequencies

Vulnerability scans

Remediation workflows

How and when vulnerabilities are fed into the organization's remediation workflow

Discuss

Answer: (d).How and when vulnerabilities are fed into the organization's remediation workflow Explanation:Penetration testers should carefully define how and when vulnerabilities detected during tests are fed into the organization's remediation workflow.

Q102.

What is a common objection to vulnerability scanning from other members of the IT team?

Inadequate scan coverage

Lack of vulnerability data

Service degradation caused by scanning

Overemphasis on remediation workflows

Discuss

Answer: (c).Service degradation caused by scanning Explanation:A common objection to vulnerability scanning is the service degradation caused by scanning.

Q103.

Ryan is conducting a penetration test and is targeting a database server. Which one of the following tools would best assist him in detecting vulnerabilities on that server?

Nessus

Nikto

SQLmap

OpenVAS

Discuss

Answer: (c).SQLmap Explanation:SQLmap is a dedicated database vulnerability scanner and is the most appropriate tool for use in this scenario. Ryan might discover the same vulnerabilities using the general-purpose Nessus or OpenVAS scanners, but they are not dedicated database vulnerability scanning tools. Nikto is a web application vulnerability scanner.

Q104.

Gary is conducting a black-box penetration test against an organization and is being provided with the results of vulnerability scans that the organization already ran for use in his tests. Which one of the following scans is most likely to provide him with helpful information within the bounds of his test?

Stealth internal scan

Full internal scan

Stealth external scan

Full external scan

Discuss

Answer: (d).Full external scan Explanation:A full scan is likely to provide more useful and actionable results because it includes more tests. There is no requirement in the scenario that Gary avoid detection, so a stealth scan is not necessary. However, this is a black-box test, so it would not be appropriate for Gary to have access to scans conducted on the internal network.

Q105.

What tool can white-box penetration testers use to help identify the systems present on a network prior to conducting vulnerability scans?

Asset inventory

Web application assessment

Router

DLP

Discuss

Answer: (a).Asset inventory Explanation:An asset inventory supplements automated tools with other information to detect systems present on a network. The asset inventory provides critical information for vulnerability scans. It is appropriate to share this information with penetration testers during a white-box penetration test.

Q106.

Tonya is configuring vulnerability scans for a system that is subject to the PCI DSS compliance standard. What is the minimum frequency with which she must conduct scans?

Daily

Weekly

Monthly

Quarterly

Discuss

Answer: (d).Quarterly Explanation:PCI DSS requires that organizations conduct vulnerability scans on at least a quarterly basis, although many organizations choose to conduct scans on a much more frequent basis.

Q107.

Which one of the following is not an example of a vulnerability scanning tool?

Qualys

Snort

Nessus

OpenVAS

Discuss

Answer: (b).Snort Explanation:QualysGuard, Nessus, and OpenVAS are all examples of vulnerability scanning tools. Snort is an intrusion detection system.

Q108.

Which one of the following technologies, when used within an organization, is the least likely to interfere with vulnerability scanning results achieved by external penetration testers?

Encryption

Firewall

Containerization

Intrusion prevention system

Discuss

Answer: (a).Encryption Explanation:Encryption technology is unlikely to have any effect on the results of vulnerability scans because it does not change the services exposed by a system. Firewalls and intrusion prevention systems may block inbound scanning traffic before it reaches target systems. Containerized and virtualized environments may prevent external scanners from seeing services exposed within the containerized or virtualized environment.

Q109.

Renee is configuring her vulnerability management solution to perform credentialed scans of servers on her network. What type of account should she provide to the scanner?

Domain administrator

Local administrator

Root

Read-only

Discuss

Answer: (d).Read-only Explanation:Credentialed scans only require read-only access to target servers. Renee should follow the principle of least privilege and limit the access available to the scanner.

Q110.

Jason is writing a report about a potential security vulnerability in a software product and wishes to use standardized product names to ensure that other security analysts understand the report. Which SCAP component can Jason turn to for assistance?

CVSS

CVE

CPE

OVAL

Discuss

Answer: (c).CPE Explanation:Common Product Enumeration (CPE) is an SCAP component that provides standardized nomenclature for product names and versions.

Page 11 of 13

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Vulnerability Scanning MCQs Page

Vulnerability Scanning MCQs | Page 11 of 13

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

PHP

IT Fundamentals

C# programming

Operating System

Java Spring Framework

CSS

Systems Analysis and Design Methods

Microprocessor

Human Computer Interaction