Vulnerability Assessment Quiz

Quiz covering Threat and Vulnerability Management

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which of the following best describes the primary goal of a vulnerability assessment?

2. 2

   When configuring a vulnerability scanner, what is the key difference between a credentialed and a non-credentialed scan?

3. 3

   After running a vulnerability scan, you receive a report showing a 'Critical' vulnerability on a server. However, the server is air-gapped and has no network connectivity to the outside world. How should you prioritize this finding?

4. 4

   What is a 'False Positive' in the context of vulnerability scanning?

5. 5

   An organization uses a CVSS score to prioritize remediation. If a vulnerability has a CVSS base score of 9.8 but the Temporal and Environmental metrics are not taken into account, what is the most likely risk of relying solely on the base score?