Podcast
Questions and Answers
Which of the following best describes the purpose of network vulnerability scanning?
Which of the following best describes the purpose of network vulnerability scanning?
- To track applications at scale around the world
- To exploit known vulnerabilities
- To identify mistakes in an organization's network (correct)
- To find potential victims for attackers
What is the main function of a network vulnerability scanner?
What is the main function of a network vulnerability scanner?
- To connect to a server and check for outdated applications
- To confirm the existence of a vulnerability (correct)
- To exploit known vulnerabilities
- To find potential victims for attackers
What is the role of the Shodan search engine?
What is the role of the Shodan search engine?
- To exploit known vulnerabilities
- To identify vulnerabilities in an organization's network
- To catalog scan results of internet-connected devices (correct)
- To find potential victims for attackers
Why are network vulnerability scans of interest to both organizations and attackers?
Why are network vulnerability scans of interest to both organizations and attackers?
What does the Shodan search engine claim to be?
What does the Shodan search engine claim to be?
How can network vulnerability scans be used to remediate vulnerabilities?
How can network vulnerability scans be used to remediate vulnerabilities?
What type of records does the Shodan search engine store?
What type of records does the Shodan search engine store?
What is the purpose of running periodic network vulnerability scans?
What is the purpose of running periodic network vulnerability scans?
What action does a network vulnerability scanner take if an application is running an outdated version with a known vulnerability?
What action does a network vulnerability scanner take if an application is running an outdated version with a known vulnerability?
What is the significance of the Shodan search engine for security researchers?
What is the significance of the Shodan search engine for security researchers?
Which technique is an essential part of network administration and network analysis at organizations?
Which technique is an essential part of network administration and network analysis at organizations?
What does a ping test involve?
What does a ping test involve?
What does a ping test indicate if the target machine replies with an echo reply packet?
What does a ping test indicate if the target machine replies with an echo reply packet?
What is the purpose of technical scanning during the reconnaissance stage of an attack?
What is the purpose of technical scanning during the reconnaissance stage of an attack?
What information does a ping test provide?
What information does a ping test provide?
What is the outbound packet called in a ping test?
What is the outbound packet called in a ping test?
What is a packet?
What is a packet?
What does the "time to live" (TTL) property indicate in a packet?
What does the "time to live" (TTL) property indicate in a packet?
Which technique is commonly used by organizations to debug networking issues?
Which technique is commonly used by organizations to debug networking issues?
What details about a target machine can be obtained through technical scanning?
What details about a target machine can be obtained through technical scanning?
Which of the following statements is true about the 'time to live' (TTL) in a packet?
Which of the following statements is true about the 'time to live' (TTL) in a packet?
What can be determined by performing a traceroute between two computers?
What can be determined by performing a traceroute between two computers?
Which command can be used to start a ping test on Windows machines?
Which command can be used to start a ping test on Windows machines?
What is the purpose of port scanning?
What is the purpose of port scanning?
Which of the following is true about "well known" ports?
Which of the following is true about "well known" ports?
What is the main purpose of vulnerability scanning?
What is the main purpose of vulnerability scanning?
Which method of vulnerability scanning involves comparing software version numbers against a database?
Which method of vulnerability scanning involves comparing software version numbers against a database?
What is the potential risk of dynamic scanning in vulnerability scanning?
What is the potential risk of dynamic scanning in vulnerability scanning?
Which statement is true about a network vulnerability scan?
Which statement is true about a network vulnerability scan?
Which protocol is commonly used for web-based applications?
Which protocol is commonly used for web-based applications?
