MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which of the following best defines a vulnerability scan in cybersecurity?
a. Manual penetration attempt to exploit systems
b. Automated process identifying known weaknesses
c. Social engineering simulation
d. Intrusion detection method
Answer: b. Automated process identifying known weaknessessenscy
Which component is primarily detected during vulnerability scanning?
a. Hardware compatibility issues
b. Misconfigurations and outdated software
c. System performance logs
d. Network throughput
Answer: b. Misconfigurations and outdated softwaresenscy
Which type of scan simulates an insider threat within an organization?
a. External scan
b. Internal scan
c. Web scan
d. Application scan
Answer: b. Internal scansenscy
Which type of scan evaluates internet-facing assets like firewalls and VPNs?
a. External vulnerability scan
b. Internal vulnerability scan
c. Local scan
d. Privilege scan
Answer: a. External vulnerability scansenscy
What is one key limitation of unauthenticated scans?
a. False positives are rare
b. They may miss internal vulnerabilities
c. They provide detailed remediation steps
d. They require root access
Answer: b. They may miss internal vulnerabilitiestenable
What is the main advantage of an authenticated vulnerability scan?
a. Faster execution time
b. Fewer system privileges needed
c. More detailed visibility of vulnerabilities
d. Reduced false positives
Answer: c. More detailed visibility of vulnerabilitiestenable
Which protocol is NOT typically used for authenticated scans?
a. SSH
b. SMB
c. HTTPS
d. FTP
Answer: d. FTPtenable
Vulnerability scanners match system weaknesses against:
a. SIEM logs
b. Internal system databases
c. CVE databases
d. OS version history
Answer: c. CVE databasesbrightsec
Which database lists globally identified vulnerabilities?
a. CVSS
b. OWASP
c. CVE
d. KEV
Answer: c. CVEbrightsec
Which type of scan targets web-based weaknesses like SQL injection?
a. Network scanner
b. Web application scanner
c. Endpoint scanner
d. Credential scanner
Answer: b. Web application scannerredcanary
External scans are critical because they:
a. Detect threats only visible within private network boundaries
b. Examine exposed assets from a hacker’s perspective
c. Run only once a year
d. Require deep system access
Answer: b. Examine exposed assets from a hacker’s perspectivesenscy
Internal scans focus primarily on:
a. Public IP exposure
b. Policy compliance
c. Insider threat vulnerabilities
d. DNS configuration issues
Answer: c. Insider threat vulnerabilitiessenscy
What does “policy compliance” scanning verify?
a. Firewall configurations
b. Adherence to security standards like PCI-DSS
c. Network speed efficiency
d. User permissions
Answer: b. Adherence to security standards like PCI-DSSredcanary
Which tool performs vulnerability scanning for systems and networks?
a. Nessus
b. Wireshark
c. Burp Suite
d. Hydra
Answer: a. Nessusscribd
Which open-source tool is often used for network vulnerability scanning?
a. Qualys
b. OpenVAS
c. McAfee
d. Fortify
Answer: b. OpenVASredcanary
What does the “severity rating” in vulnerability reports indicate?
a. The total number of vulnerabilities
b. The business impact risk level
c. The size of affected files
d. The system uptime before scan
Answer: b. The business impact risk leveltechtarget
Which organization maintains the CVE list?
a. Cisco
b. NIST
c. ISO
d. Microsoft
Answer: b. NISTtenable
Which metric system assigns numerical scores to vulnerabilities?
a. CPE
b. CVSS
c. CWE
d. KEV
Answer: b. CVSStenable
Which type of scan requires user credentials for deep system checks?
a. Credentialed scan
b. Passive scan
c. Non-credentialed scan
d. Anonymous scan
Answer: a. Credentialed scantenable
Unauthenticated scans are performed when:
a. No credentials are provided
b. Systems are offline
c. Scans need deeper inspection
d. Malware testing is done
Answer: a. No credentials are providedtenable
Vulnerability scanning tools regularly update their databases from:
a. Operating system vendors
b. Cybersecurity agencies like CISA
c. ISP registries
d. DNS root authorities
Answer: b. Cybersecurity agencies like CISAredcanary
Which phase comes immediately after vulnerability identification?
a. Risk prioritization
b. Patch deployment
c. Policy audit
d. Access review
Answer: a. Risk prioritizationbrightsec
CVSS stands for:
a. Common Vulnerability Scoring System
b. Central Validation Security System
c. Core Vulnerability Standards Suite
d. Cyber Validation Score System
Answer: a. Common Vulnerability Scoring Systemtenable
What is a key feature of automated vulnerability scanning?
a. Use of manual inspection
b. Continuous monitoring without human input
c. Requires prior exploitation
d. Detects insider threats
Answer: b. Continuous monitoring without human inputredcanary
Which type of vulnerability scanner assesses databases?
a. Network scanner
b. Database scanner
c. IoT scanner
d. Mobile scanner
Answer: b. Database scannerredcanary
What kind of vulnerabilities do database scanners typically detect?
a. Weak passwords and misconfigurations
b. Zero-day exploits
c. Denial of Service flaws
d. Wireless interference
Answer: a. Weak passwords and misconfigurationsredcanary
The output of a vulnerability scan is typically:
a. A system reboot log
b. A vulnerability assessment report
c. A firewall configuration file
d. An executable patch
Answer: b. A vulnerability assessment reporttechtarget
Which of the following tools is best suited for continuous scanning?
a. Tenable Nessus
b. Wireshark
c. Scapy
d. Aircrack-ng
Answer: a. Tenable Nessustenable
Which factor greatly affects the accuracy of a scan?
a. Network bandwidth only
b. Credentialed access level
c. User interface design
d. Operating system vendor
Answer: b. Credentialed access leveltenable
Hosts scanned without credentials might:
a. Display fewer detected vulnerabilities
b. Report excessive false negatives
c. Require more detailed manual review
d. Avoid overwriting CVE entries
Answer: a. Display fewer detected vulnerabilitiestenable
Scans identifying compliance violations map results to:
a. NIST SP 800-53
b. IEEE 802.3
c. ISO 9001
d. PCIe
Answer: a. NIST SP 800-53techtarget
Nmap is widely used in vulnerability scanning for:
a. Port and service discovery
b. Password recovery
c. Malware disassembly
d. Antivirus signature updates
Answer: a. Port and service discoverygtu-mcq
Why is timing important in scheduling scans on production networks?
a. To minimize disruption to live services
b. To detect stealth malware
c. To evaluate encryption quality
d. To isolate VPN users
Answer: a. To minimize disruption to live servicesitexamanswers
How can false positives be minimized?
a. Use multiple unauthenticated scans
b. Combine credentialed and uncredentialed scans
c. Run scans weekly without report analysis
d. Use outdated vulnerability databases
Answer: b. Combine credentialed and uncredentialed scanstenable
Vulnerability scanning is preferred over penetration testing when:
a. You need automated ongoing detection
b. You need to exploit vulnerabilities manually
c. You have unlimited test time
d. You must simulate a real attacker completely
Answer: a. You need automated ongoing detectionfreshersnow
The output of a vulnerability scanner often includes:
a. Suggested remediation actions
b. Source code patches
c. Live firewall updates
d. DNS query logs
Answer: a. Suggested remediation actionsredcanary
A vulnerability assessment differs from management by being:
a. A one-time detection process
b. A continuous monitoring system
c. A manual code inspection
d. A certification mechanism
Answer: a. A one-time detection processtechtarget
Common network scanning ports include:
a. TCP 80, 22, 443
b. UDP 25, 53, 3389
c. FTP 21, 25
d. TCP 8080, 9020
Answer: a. TCP 80, 22, 443gtu-mcq
Which vulnerability scanner integrates with patch management tools?
a. OpenVAS
b. Nessus
c. Qualys
d. Retina CS
Answer: c. Qualysredcanary
The primary goal of vulnerability scanning is:
a. Identifying weaknesses before exploitation
b. Detecting active attacks
c. Encrypting user logs
d. Preventing malware downloads
Answer: a. Identifying weaknesses before exploitationsenscy
What is the first step in conducting a vulnerability scan?
a. Define scan scope and targets
b. Generate final report
c. Deploy patches
d. Send alerts to clients
Answer: a. Define scan scope and targetstechtarget
Credentialed scans result in:
a. Fewer privileges but faster output
b. Higher depth and accuracy
c. Limited system interaction
d. Human-only validation
Answer: b. Higher depth and accuracytenable
Which parameter throttles network usage during scans?
a. Query throttling
b. Port shuffling
c. Proxy caching
d. Time warping
Answer: a. Query throttlingitexamanswers
Tenable agents are used to:
a. Conduct local checks with elevated privileges
b. Launch DDoS mitigation scripts
c. Modify CVE scores
d. Block external ports
Answer: a. Conduct local checks with elevated privilegestenable
Vulnerability scanning reports assist in:
a. Creating security awareness programs
b. Prioritizing patch management
c. Disaster recovery operations
d. Backup automation
Answer: b. Prioritizing patch managementredcanary
Performing scans close to targets helps:
a. Reduce latency and false positives
b. Increase bandwidth consumption
c. Decrease scan speed
d. Hide from attackers
Answer: a. Reduce latency and false positivesitexamanswers
A false negative in vulnerability scanning means:
a. Nonexistent vulnerability flagged as real
b. Real vulnerability missed by the tool
c. Successful patch marked unpatched
d. Credential mismatch error
Answer: b. Real vulnerability missed by the tooltechtarget
Which standard framework supports structured vulnerability reporting?
a. NIST CSF
b. SOC 2
c. COBIT
d. CMMI
Answer: a. NIST CSFitexamanswers
Vulnerability scans complement which other major process?
a. Incident response
b. Traffic shaping
c. Software testing
d. Power management
Answer: a. Incident responsesenscy
Continuous vulnerability scanning enhances:
a. Proactive security posture
b. Manual attack verification
c. Policy enforcement
d. Cloud billing optimization
Answer: a. Proactive security posturesenscy+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info