CYSA+ Chapter 4 with all Correct & 100% Verified
Answers |Guaranteed to Pass
What is CVSS? ✔Correct Answer-Common Vulnerability Scoring System. It provides a
technique for scoring each vulnerability on a variety of measures.
Interpret the below CVSS vector:
CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N ✔Correct Answer-Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None
Nessus low vulnerability score: ✔Correct Answer-Under 4.0
Nessus medium vulnerability score: ✔Correct Answer-4.0 or higher, but less than 6.0
Nessus high vulnerability score: ✔Correct Answer-6.0 or higher, but less than 10.0
Nessus critical vulnerability score: ✔Correct Answer-10.0
What is a buffer overflow attack? ✔Correct Answer-These occur when an attacker
manipulates a program into placing more data into an area of memory than is allocated for that
program's use.
How do you mitigate a buffer overflow vulnerability? ✔Correct Answer-Find a patch that
corrects the issue.
What is a privilege escalation attack? ✔Correct Answer-An attack that seeks to increase the
level of access that an attacker has to a target system.
What is an arbitrary code execution vulnerability? ✔Correct Answer-A vulnerability that
allows an attacker to run software of his or her choice on the targeted system.
How do you mitigate an arbitrary code execution attack? ✔Correct Answer-Find a patch that
corrects the issue.
Answers |Guaranteed to Pass
What is CVSS? ✔Correct Answer-Common Vulnerability Scoring System. It provides a
technique for scoring each vulnerability on a variety of measures.
Interpret the below CVSS vector:
CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N ✔Correct Answer-Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None
Nessus low vulnerability score: ✔Correct Answer-Under 4.0
Nessus medium vulnerability score: ✔Correct Answer-4.0 or higher, but less than 6.0
Nessus high vulnerability score: ✔Correct Answer-6.0 or higher, but less than 10.0
Nessus critical vulnerability score: ✔Correct Answer-10.0
What is a buffer overflow attack? ✔Correct Answer-These occur when an attacker
manipulates a program into placing more data into an area of memory than is allocated for that
program's use.
How do you mitigate a buffer overflow vulnerability? ✔Correct Answer-Find a patch that
corrects the issue.
What is a privilege escalation attack? ✔Correct Answer-An attack that seeks to increase the
level of access that an attacker has to a target system.
What is an arbitrary code execution vulnerability? ✔Correct Answer-A vulnerability that
allows an attacker to run software of his or her choice on the targeted system.
How do you mitigate an arbitrary code execution attack? ✔Correct Answer-Find a patch that
corrects the issue.
