Vulnerability Management Exam
Questions 100% Verified Complete
Answers New Update
vulnerability -
correct answer ✅A flaw or weakness that allows a threat agent to
bypass security.
0-Day Vulnerability (Zero Day) -
correct answer ✅A vulnerability that is not known to the software
developer or vendor, but is known to an attacker
Resources to information about vulnerabilities -
correct answer ✅NIST National Vulnerability Database
MITRE CVE
FEEDLY
Twitter
CVSS (Common Vulnerability Scoring System) -
correct answer ✅A risk management approach to quantifying
vulnerability data and then taking into account the degree of risk to
different types of systems or information.
3.0
Generate a score from 0-10 based on intrinsic characteristics of the
vuln.
, Vulnerability Management Exam
Questions 100% Verified Complete
Answers New Update
0 = none
0.1=3.9 = low
4.0-6.9 = medium
7.0 - 8.9 -= high
9.0+ = critical
CVE (Common Vulnerabilities and Exposures) -
correct answer ✅dictionary that provides a central repository of
sec vuln's and issues
Each CVE # represents a specific vulnerability
Types of Vulnerability Scans -
correct answer ✅▪ Discovery scan
▪ Full scan
▪ Stealth scan
▪ Compliance scan
▪Passive Scan
▪Active Scan
Questions 100% Verified Complete
Answers New Update
vulnerability -
correct answer ✅A flaw or weakness that allows a threat agent to
bypass security.
0-Day Vulnerability (Zero Day) -
correct answer ✅A vulnerability that is not known to the software
developer or vendor, but is known to an attacker
Resources to information about vulnerabilities -
correct answer ✅NIST National Vulnerability Database
MITRE CVE
FEEDLY
CVSS (Common Vulnerability Scoring System) -
correct answer ✅A risk management approach to quantifying
vulnerability data and then taking into account the degree of risk to
different types of systems or information.
3.0
Generate a score from 0-10 based on intrinsic characteristics of the
vuln.
, Vulnerability Management Exam
Questions 100% Verified Complete
Answers New Update
0 = none
0.1=3.9 = low
4.0-6.9 = medium
7.0 - 8.9 -= high
9.0+ = critical
CVE (Common Vulnerabilities and Exposures) -
correct answer ✅dictionary that provides a central repository of
sec vuln's and issues
Each CVE # represents a specific vulnerability
Types of Vulnerability Scans -
correct answer ✅▪ Discovery scan
▪ Full scan
▪ Stealth scan
▪ Compliance scan
▪Passive Scan
▪Active Scan