Review Questions - SYS701 - 5 - Security Assessment and Testing

Which one of the following security assessment techniques assumes that an organization has already been compromised and searches for evidence of that compromise?

Renee is configuring her vulnerability management solution to perform credentialed scans of servers on her network. What type of account should she provide to the scanner?

Ryan is planning to conduct a vulnerability scan of a business-critical system using dangerous plug-ins. What would be the best approach for the initial scan?

Which one of the following values for the CVSS attack complexity metric would indicate that the specified attack is simplest to exploit?

Tara recently analyzed the results of a vulnerability scan report and found that a vulnerability reported by the scanner did not exist because the system was actually patched as specified. What type of error occurred?

Brian ran a penetration test against a school's grading system and discovered a flaw that would allow students to alter their grades by exploiting a SQL injection vulnerability. What type of control should he recommend to the school's cybersecurity team to prevent students from engaging in this type of activity?

Which one of the following security assessment tools is least likely to be used during the reconnaissance phase of a penetration test?

Which one of the following tools is most likely to detect an XSS vulnerability?

During a penetration test, Patrick deploys a toolkit on a compromised system and uses it to gain access to other systems on the same network. What term best describes this activity?

Zian is a cybersecurity leader who is coordinating the activities of a security audit. The audit is being done to validate the organization's financial statements to investors and involves a review of cybersecurity controls. What term best describes this audit?

Which one of the following assessment techniques is designed to solicit participation from external security experts and reward them for discovering vulnerabilities?

Kyle is conducting a penetration test. After gaining access to an organization's database server, he installs a backdoor on the server to grant himself access in the future. What term best describes this action?

Which one of the following techniques would be considered passive reconnaissance?

Which element of the SCAP framework can be used to consistently describe vulnerabilities?

Bruce is conducting a penetration test for a client. The client provided him with full details of their systems in advance. What type of test is Bruce conducting?

Lila is working on a penetration testing team and she is unsure whether she is allowed to conduct social engineering as part of the test. What document should she consult to find this information?

Grace would like to determine the operating system running on a system that she is targeting in a penetration test. Which one of the following techniques will most directly provide her with this information?

Kevin recently identified a new security vulnerability and computed its CVSS base score as 6.5. Which risk category would this vulnerability fall into?

Which one of the CVSS metrics would contain information about the type of account access that an attacker must have to execute an attack?

Threat Hunting

Read-only Account (for Vulnerability Scans)

Test Environment for Vulnerability Scans

CVSS Attack Complexity: Low

False Positive (in Vulnerability Scanning)

Integrity Controls

Metasploit (in Reconnaissance)

Web Application Vulnerability Scanner

Lateral Movement

External Audit (Cybersecurity)

Bug Bounty

Persistence (Penetration Testing)

Passive Reconnaissance

CVE (Common Vulnerabilities and Exposures)

Known Environment Test

Rules of Engagement

Footprinting

CVSS Score 6.5: Risk Category

CVSS Metric: PR (Privileges Required)