GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

S+ Objective 3.8 Quiz

Tyler Hampton 9 questions

Take the quiz

Questions in this quiz (9)

  1. 1You recently completed a vulnerability scan on your network. It reported that several servers are missing key operating system patches. However, after checking the servers, you've verified the servers have these patches installed. Which of the following BEST describes this?
    1. AFalse negative
    2. BMisconfiguration of servers
    3. CFalse positive
    4. DServers not hardened
  2. 2You suspect that a database server used by a web application does not have current patches. Which of the following is the BEST action to take to verify the server has up-to-date patches?
    1. AVulnerability Scan
    2. BPort Scan
    3. CProtocol Analyzer
    4. DHost Enumeration
  3. 3An organization has a legacy server within the DMZ. It is running older software that is not compatible with current patches, so it remains unpatched. Management accepts the risk on this system, but wants to know if attackers can access the internal network if they successfully compromise this server. Which of the following is the MOST appropriate test?
    1. AVulnerability Scan
    2. BPort Scan
    3. CCode Review
    4. DPentest
  4. 4Testers do not have access to product documentation or any experience with an application. What type of test will they MOST likely perform?
    1. AGray box
    2. BWhite box
    3. CBlack box
    4. DBlack hat
  5. 5Your organization has hired a group of external testers to perform a black box penetration test. One of the testers asks you to provide information about your internal network. What should you provide?
    1. AA list of IP ranges and the types of security devices operational on the network
    2. BNetwork diagrams but without internal IP addresses
    3. CAccess points to the network
    4. DNothing
    5. ESome network diagrams and some IP addresses, but not all
  6. 6Which of the following tools is the MOST invasive type of testing?
    1. APentest
    2. BProtocol Analyzer
    3. CVulnerability Scan
    4. DHIDS
  7. 7Testers are analyzing a web application your organization is planning to deploy. They have full access to product documentation, including the code and data structures used by the application. What type of test will they MOST likely perform?
    1. AGray box
    2. BWhite box
    3. CBlack box
    4. DGray Hat
  8. 8Lisa recently an application to test the security posture of a database server running in a a test bed. What type of report will she retrieve to identify vulnerabilities that the application actually exploited?
    1. APenetration test report
    2. BVulnerability report
    3. CRisk assessment report
    4. DCode review report
  9. 9Your organization outsourced development of a software module to modify the functionality of an existing proprietary application. The developer completed the module and is now testing it with the entire application. What type of testing is the developer performing?
    1. AWhite box
    2. BBlack box
    3. CGray box
    4. DCode Review

Information

Description
Explain the proper use of penetration testing versus vulnerability scanning.
Language
English
Views
42
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?