Deck 6: Analyzing Vulnerability Scans and Identifying Common Vulnerabilities

Question 1

Which of the following is a basic language that Nessus uses to help describe individual threats and potential attacks?

A) NASL
B) CVSS
C) SSL
D) USSL

Answer 1

NASL

Question 2

_______________ is a set of commercial or professional procedures that are accepted or sometimes prescribed as being the most effective solutions.

Answer 2

Best practices

Question 3

What is the final step in the analysis of a vulnerability scan?

A) Review
B) Interpretation
C) Validation
D) Correlation

Answer 3

Validation

Question 4

What is the term used for an alarm that is raised when there is no problem?

Question 5

Multiple metrics from a vulnerability scan make up the __________ score, which is produced by a complex series of algorithms.

Question 6

What term refers to a technology that can help evenly distribute work across a network?

Question 7

A desktop PC is an example of an embedded system.

Question 8

What is a hardware appliance or software that is used to join two separate computer networks to enable communication between them?

A) Router
B) Load balancer
C) Bridge
D) Switch

Question 9

______________ is a way to manage and present computer resources by function without regard to their physical layout or location.

Question 10

Which of the following is not considered an endpoint device?

A) Printer
B) SCADA system
C) MFD
D) Smart meter