Vulnerability Assessment Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Threat and Vulnerability Management

What you'll be asked

  1. Which of the following best describes the primary goal of a vulnerability assessment?
  2. When configuring a vulnerability scanner, what is the key difference between a credentialed and a non-credentialed scan?
  3. After running a vulnerability scan, you receive a report showing a 'Critical' vulnerability on a server. However, the server is air-gapped and has no network connectivity to the outside world. How should you prioritize this finding?
  4. What is a 'False Positive' in the context of vulnerability scanning?
  5. An organization uses a CVSS score to prioritize remediation. If a vulnerability has a CVSS base score of 9.8 but the Temporal and Environmental metrics are not taken into account, what is the most likely risk of relying solely on the base score?

Answers and explanations come after you submit.