VULNERABILITY ASSESSMENT EXAMINATION
QUESTIONS AND CORRECT ANSWER WITH
EXPLANATION GRADED A+ STUDY GUIDE SOUTHERN
NEW HAMPSHIRE UNIVERSITY
1. Vulnerability assessment is defined as:
A. Identifying and evaluating security weaknesses in systems
B. Building hardware systems
C. Writing software code
D. Increasing CPU speed
Answer: A
Rationale: It focuses on finding security weaknesses.
2. The main goal of vulnerability assessment is to:
A. Reduce security risks
B. Improve internet speed
C. Design networks
D. Develop applications
Answer: A
Rationale: It helps prevent exploitation.
3. A vulnerability is:
A. A weakness that can be exploited
B. A firewall system
C. A secure configuration
D. A backup file
Answer: A
Rationale: Security flaw in a system.
4. A threat is:
,A. Potential cause of harm
B. Security patch
C. Antivirus software
D. Encryption tool
Answer: A
Rationale: Anything that can exploit vulnerabilities.
5. Risk is calculated as:
A. Threat × Vulnerability × Impact
B. CPU × RAM
C. Speed × Storage
D. Network × Hardware
Answer: A
Rationale: Standard risk formula.
6. Vulnerability scanning is used to:
A. Automatically detect weaknesses
B. Increase CPU speed
C. Encrypt data
D. Backup files
Answer: A
Rationale: Automated security scanning.
7. A false positive occurs when:
A. A non-existent vulnerability is reported
B. Real vulnerability is ignored
C. System crashes
D. Malware executes
Answer: A
Rationale: Incorrect detection.
8. A false negative occurs when:
, A. Existing vulnerability is missed
B. System is secured
C. CPU increases speed
D. Network improves
Answer: A
Rationale: Failure to detect risk.
9. Vulnerability scanning tools include:
A. Nessus and OpenVAS
B. Excel and Word
C. Chrome and Firefox
D. Photoshop and Paint
Answer: A
Rationale: Security assessment tools.
10. A CVE refers to:
A. Common Vulnerabilities and Exposures
B. Computer Virtual Environment
C. Cyber Virus Engine
D. Control Verification Entry
Answer: A
Rationale: Standard vulnerability database.
11. CVSS is used to:
A. Rate severity of vulnerabilities
B. Speed up CPU
C. Encrypt files
D. Manage networks
Answer: A
Rationale: Scoring system.
12. High CVSS score indicates:
QUESTIONS AND CORRECT ANSWER WITH
EXPLANATION GRADED A+ STUDY GUIDE SOUTHERN
NEW HAMPSHIRE UNIVERSITY
1. Vulnerability assessment is defined as:
A. Identifying and evaluating security weaknesses in systems
B. Building hardware systems
C. Writing software code
D. Increasing CPU speed
Answer: A
Rationale: It focuses on finding security weaknesses.
2. The main goal of vulnerability assessment is to:
A. Reduce security risks
B. Improve internet speed
C. Design networks
D. Develop applications
Answer: A
Rationale: It helps prevent exploitation.
3. A vulnerability is:
A. A weakness that can be exploited
B. A firewall system
C. A secure configuration
D. A backup file
Answer: A
Rationale: Security flaw in a system.
4. A threat is:
,A. Potential cause of harm
B. Security patch
C. Antivirus software
D. Encryption tool
Answer: A
Rationale: Anything that can exploit vulnerabilities.
5. Risk is calculated as:
A. Threat × Vulnerability × Impact
B. CPU × RAM
C. Speed × Storage
D. Network × Hardware
Answer: A
Rationale: Standard risk formula.
6. Vulnerability scanning is used to:
A. Automatically detect weaknesses
B. Increase CPU speed
C. Encrypt data
D. Backup files
Answer: A
Rationale: Automated security scanning.
7. A false positive occurs when:
A. A non-existent vulnerability is reported
B. Real vulnerability is ignored
C. System crashes
D. Malware executes
Answer: A
Rationale: Incorrect detection.
8. A false negative occurs when:
, A. Existing vulnerability is missed
B. System is secured
C. CPU increases speed
D. Network improves
Answer: A
Rationale: Failure to detect risk.
9. Vulnerability scanning tools include:
A. Nessus and OpenVAS
B. Excel and Word
C. Chrome and Firefox
D. Photoshop and Paint
Answer: A
Rationale: Security assessment tools.
10. A CVE refers to:
A. Common Vulnerabilities and Exposures
B. Computer Virtual Environment
C. Cyber Virus Engine
D. Control Verification Entry
Answer: A
Rationale: Standard vulnerability database.
11. CVSS is used to:
A. Rate severity of vulnerabilities
B. Speed up CPU
C. Encrypt files
D. Manage networks
Answer: A
Rationale: Scoring system.
12. High CVSS score indicates:
