1
CompTIA Network
Vulnerability Assessment
Professional (CNVP) –
Advanced Practice Exam
v2.0 a well detailed one
written and
graded A+ upgraded
Exam Title: CompTIA Network Vulnerability Assessment Professional (CNVP) – Advanced
Practice Examination Version 2.0
, 2
Target Audience: IT security professionals with 3–7 years of experience in network security,
vulnerability management, penetration testing, and security operations
Difficulty Level: Advanced / Hard / Mixed (ranging from intermediate to expert-level questions
with emphasis on scenario-based reasoning)
Total Questions: 150 Multiple-Choice Questions
Section 1: Vulnerability Assessment Concepts and Methodologies (Questions 1–25)
1. A security consultant is engaged to perform a vulnerability assessment for a multinational
organization with operations in multiple countries. Which of the following represents the
MOST critical preliminary step before initiating any scanning activities?
A) Selecting the most expensive commercial vulnerability scanner
B) Defining the scope, obtaining written authorization, and understanding regulatory
requirements for each jurisdiction
C) Immediately running a full network scan to establish a baseline
D) Hiring additional staff to handle the assessment workload
-” detailed answer 100 % correct :-”B
Rationale: Before initiating any vulnerability assessment, defining scope, obtaining written
authorization, and understanding applicable regulations are foundational steps to ensure legal
compliance and appropriate targeting.
2. An organization wants to implement a vulnerability management program but has limited
budget and personnel. Which of the following approaches would provide the BEST balance of
effectiveness and resource efficiency?
A) Implementing only automated scanning with no human analysis
B) Deploying open-source tools with focused scope, risk-based prioritization, and periodic
manual verification
C) Outsourcing all vulnerability management to a third party without internal oversight
D) Conducting assessments only when a security incident occurs
-” detailed answer 100 % correct :-”B
Rationale: Open-source tools with focused scope, risk-based prioritization, and periodic manual
verification provide effective vulnerability management while optimizing limited resources.
, 3
3. A vulnerability analyst is reviewing the results of a scan that identified a critical
vulnerability on a system. The system owner disputes the finding, stating that the system has
been patched. Which of the following is the MOST appropriate next step?
A) Accept the system owner's statement and close the finding
B) Escalate the dispute immediately to senior management
C) Manually verify the system's patch status and the scanner's detection method
D) Delete the finding from the report to avoid conflict
-” detailed answer 100 % correct :-”C
Rationale: Manual verification of patch status and scanner detection methods is essential to
resolve disputes and ensure accurate vulnerability identification.
4. Which of the following BEST describes the relationship between Common Vulnerabilities
and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS)?
A) CVE provides severity scores while CVSS lists vulnerability names
B) CVE provides unique identifiers for vulnerabilities and CVSS provides a standardized severity
scoring framework
C) Both are interchangeable terms for the same concept
D) CVSS is used only for web application vulnerabilities, while CVE is used for network
vulnerabilities
-” detailed answer 100 % correct :-”B
Rationale: CVE provides unique identifiers for publicly known vulnerabilities, while CVSS
provides a standardized framework for assessing and scoring vulnerability severity.
5. A security analyst is performing a vulnerability assessment in an environment with strict
change management controls. Which of the following is the MOST important consideration
when scheduling scans?
A) Scans should be performed without notification to test detection capabilities
B) Scans must be coordinated with the change management process and approved through the
proper channels
C) Scans should only be performed during peak business hours
D) Scans should bypass change management for faster execution
-” detailed answer 100 % correct :-”B
Rationale: In environments with strict change management, vulnerability scans must be
, 4
coordinated and approved through proper channels to maintain compliance and avoid
disruptions.
6. Which of the following is an example of a vulnerability that would be categorized as a
"design flaw" rather than an implementation flaw?
A) SQL injection in a web application
B) Buffer overflow in an application
C) Insecure cryptographic algorithm used by design in a protocol
D) Missing security patch on a server
-” detailed answer 100 % correct :-”C
Rationale: Insecure cryptographic algorithms used by design represent fundamental design
flaws, while SQL injection and buffer overflows are typically implementation flaws.
7. A vulnerability assessment report indicates that a system has a CVSS score of 7.8. However,
the system is not connected to any network and is stored in a secure facility. How should this
vulnerability be classified?
A) Critical severity based on the CVSS score
B) Low risk because the environmental factors significantly reduce the potential for exploitation
C) Medium risk because the system could be stolen
D) No risk assessment is possible without additional information
-” detailed answer 100 % correct :-”B
Rationale: Environmental context—such as network isolation and physical security—
significantly reduces the actual risk despite the CVSS score.
8. What is the PRIMARY purpose of conducting vulnerability assessments in a DevOps
environment?
A) To identify vulnerabilities in production only
B) To identify and remediate vulnerabilities early in the development lifecycle through
DevSecOps practices
C) To replace the need for code reviews
D) To conduct assessments only after deployment
CompTIA Network
Vulnerability Assessment
Professional (CNVP) –
Advanced Practice Exam
v2.0 a well detailed one
written and
graded A+ upgraded
Exam Title: CompTIA Network Vulnerability Assessment Professional (CNVP) – Advanced
Practice Examination Version 2.0
, 2
Target Audience: IT security professionals with 3–7 years of experience in network security,
vulnerability management, penetration testing, and security operations
Difficulty Level: Advanced / Hard / Mixed (ranging from intermediate to expert-level questions
with emphasis on scenario-based reasoning)
Total Questions: 150 Multiple-Choice Questions
Section 1: Vulnerability Assessment Concepts and Methodologies (Questions 1–25)
1. A security consultant is engaged to perform a vulnerability assessment for a multinational
organization with operations in multiple countries. Which of the following represents the
MOST critical preliminary step before initiating any scanning activities?
A) Selecting the most expensive commercial vulnerability scanner
B) Defining the scope, obtaining written authorization, and understanding regulatory
requirements for each jurisdiction
C) Immediately running a full network scan to establish a baseline
D) Hiring additional staff to handle the assessment workload
-” detailed answer 100 % correct :-”B
Rationale: Before initiating any vulnerability assessment, defining scope, obtaining written
authorization, and understanding applicable regulations are foundational steps to ensure legal
compliance and appropriate targeting.
2. An organization wants to implement a vulnerability management program but has limited
budget and personnel. Which of the following approaches would provide the BEST balance of
effectiveness and resource efficiency?
A) Implementing only automated scanning with no human analysis
B) Deploying open-source tools with focused scope, risk-based prioritization, and periodic
manual verification
C) Outsourcing all vulnerability management to a third party without internal oversight
D) Conducting assessments only when a security incident occurs
-” detailed answer 100 % correct :-”B
Rationale: Open-source tools with focused scope, risk-based prioritization, and periodic manual
verification provide effective vulnerability management while optimizing limited resources.
, 3
3. A vulnerability analyst is reviewing the results of a scan that identified a critical
vulnerability on a system. The system owner disputes the finding, stating that the system has
been patched. Which of the following is the MOST appropriate next step?
A) Accept the system owner's statement and close the finding
B) Escalate the dispute immediately to senior management
C) Manually verify the system's patch status and the scanner's detection method
D) Delete the finding from the report to avoid conflict
-” detailed answer 100 % correct :-”C
Rationale: Manual verification of patch status and scanner detection methods is essential to
resolve disputes and ensure accurate vulnerability identification.
4. Which of the following BEST describes the relationship between Common Vulnerabilities
and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS)?
A) CVE provides severity scores while CVSS lists vulnerability names
B) CVE provides unique identifiers for vulnerabilities and CVSS provides a standardized severity
scoring framework
C) Both are interchangeable terms for the same concept
D) CVSS is used only for web application vulnerabilities, while CVE is used for network
vulnerabilities
-” detailed answer 100 % correct :-”B
Rationale: CVE provides unique identifiers for publicly known vulnerabilities, while CVSS
provides a standardized framework for assessing and scoring vulnerability severity.
5. A security analyst is performing a vulnerability assessment in an environment with strict
change management controls. Which of the following is the MOST important consideration
when scheduling scans?
A) Scans should be performed without notification to test detection capabilities
B) Scans must be coordinated with the change management process and approved through the
proper channels
C) Scans should only be performed during peak business hours
D) Scans should bypass change management for faster execution
-” detailed answer 100 % correct :-”B
Rationale: In environments with strict change management, vulnerability scans must be
, 4
coordinated and approved through proper channels to maintain compliance and avoid
disruptions.
6. Which of the following is an example of a vulnerability that would be categorized as a
"design flaw" rather than an implementation flaw?
A) SQL injection in a web application
B) Buffer overflow in an application
C) Insecure cryptographic algorithm used by design in a protocol
D) Missing security patch on a server
-” detailed answer 100 % correct :-”C
Rationale: Insecure cryptographic algorithms used by design represent fundamental design
flaws, while SQL injection and buffer overflows are typically implementation flaws.
7. A vulnerability assessment report indicates that a system has a CVSS score of 7.8. However,
the system is not connected to any network and is stored in a secure facility. How should this
vulnerability be classified?
A) Critical severity based on the CVSS score
B) Low risk because the environmental factors significantly reduce the potential for exploitation
C) Medium risk because the system could be stolen
D) No risk assessment is possible without additional information
-” detailed answer 100 % correct :-”B
Rationale: Environmental context—such as network isolation and physical security—
significantly reduces the actual risk despite the CVSS score.
8. What is the PRIMARY purpose of conducting vulnerability assessments in a DevOps
environment?
A) To identify vulnerabilities in production only
B) To identify and remediate vulnerabilities early in the development lifecycle through
DevSecOps practices
C) To replace the need for code reviews
D) To conduct assessments only after deployment
