Vulnerabilities Assessment & Risk
Management Training Exam Actual
Questions and Answers 2026
_____ is used to find vulnerabilities within a computer system. -
correct answer ✅Penetration testing
_____ uses public data to gather information about a target. -
correct answer ✅Passive reconnaissance
Your company has a DoS vulnerability. Which security process
reduces the likelihood of a DoS attack? -
correct answer ✅Mitigation
What is used to locate potential vulnerabilities in a computer
system? -
correct answer ✅Penetration testing
Which three options are standards that enable the exchange of
cyber threat intelligence (CTI) in an automated, consistent, and
machine-readable format? -
correct answer ✅CybOX, TAXII, STIX
Which three types of threat intelligence data do threat intelligence
platforms collect? -
, Vulnerabilities Assessment & Risk
Management Training Exam Actual
Questions and Answers 2026
correct answer ✅Reputation information, Tools, Techniques, and
procedures, Indicators of compromise
Threat intelligence services use the data of their subscribers to stay
current with the threat landscape. -
correct answer ✅True
The MITRE Corporation creates a catalog of known security threats.
What is the name of the catalog? -
correct answer ✅CVE
Which scenario is an example of a passive reconnaissance
technique? -
correct answer ✅Using NSLookup to get information related to a
hostname
You are conducting an internal penetration test. As part of the
penetration test, you conduct an active reconnaissance attack.
What is the purpose of conducting the active reconnaissance
attack? -
correct answer ✅To scan systems for vulnerabilities and identify
weaknesses for attack.
Management Training Exam Actual
Questions and Answers 2026
_____ is used to find vulnerabilities within a computer system. -
correct answer ✅Penetration testing
_____ uses public data to gather information about a target. -
correct answer ✅Passive reconnaissance
Your company has a DoS vulnerability. Which security process
reduces the likelihood of a DoS attack? -
correct answer ✅Mitigation
What is used to locate potential vulnerabilities in a computer
system? -
correct answer ✅Penetration testing
Which three options are standards that enable the exchange of
cyber threat intelligence (CTI) in an automated, consistent, and
machine-readable format? -
correct answer ✅CybOX, TAXII, STIX
Which three types of threat intelligence data do threat intelligence
platforms collect? -
, Vulnerabilities Assessment & Risk
Management Training Exam Actual
Questions and Answers 2026
correct answer ✅Reputation information, Tools, Techniques, and
procedures, Indicators of compromise
Threat intelligence services use the data of their subscribers to stay
current with the threat landscape. -
correct answer ✅True
The MITRE Corporation creates a catalog of known security threats.
What is the name of the catalog? -
correct answer ✅CVE
Which scenario is an example of a passive reconnaissance
technique? -
correct answer ✅Using NSLookup to get information related to a
hostname
You are conducting an internal penetration test. As part of the
penetration test, you conduct an active reconnaissance attack.
What is the purpose of conducting the active reconnaissance
attack? -
correct answer ✅To scan systems for vulnerabilities and identify
weaknesses for attack.
