What is the main purpose of vulnerability scanning?
Correct!
Wrong!
Vulnerability scanning helps identify weaknesses in systems that could be exploited by threats.
Which tool is commonly used for vulnerability assessments?
Correct!
Wrong!
Tools like Nessus are widely used in security testing for vulnerabilities.
What does CVSS stand for?
Correct!
Wrong!
CVSS helps in assigning severity scores to vulnerabilities.
Which phase comes after identifying a vulnerability?
Correct!
Wrong!
After identification, the next phase is risk analysis to prioritize responses.
Which of the following is a threat vector?
Correct!
Wrong!
Threat vectors are paths used by attackers to gain access to a system.
What is the difference between vulnerability and threat?
Correct!
Wrong!
Vulnerability is a weakness, while a threat is a potential danger that exploits that weakness.
Loading Questions...
Which database provides vulnerability information?
Correct!
Wrong!
The National Vulnerability Database (NVD) is maintained by NIST.
What is zero-day vulnerability?
Correct!
Wrong!
A zero-day vulnerability is one that is unknown to those who should be interested in mitigating it.
Which practice reduces the chance of exploitation?
Correct!
Wrong!
Regular patching closes known security gaps.