Which of the following is true of vulnerability scanning? a. It uses automated software to scan for vulnerabilities. b. The testers are always outside of the security perimeter. c. It may disrupt the operation of the network or systems. d. It produces a short report of the attack methods and value of the exploited data.

Which of the following is true of vulnerability scanning? a. It uses automated software to scan for vulnerabilities. b. The testers are always outside of the security perimeter. c. It may disrupt the operation of the network or systems. d. It produces a short report of the attack methods and value of the exploited data.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter11: Security Maintenance

Section: Chapter Questions

Problem 19RQ

See similar textbooks

Similar questions

Which of the following is an example of an activity that can be automated? A)risk assessment B)penetration testing C)vulnerability testing D) security assessment
Four sources of vulnerability intelligence should be taken into account. Which do you think is the most beneficial, in your opinion? Why?
Imagine that a virus was attached to an email that was sent to Jim, and that this email caused Jim to get infected with the virus. Are you able to provide a description of this attack, including the vulnerabilities, hazards, and those who committed it?
What kind of attack simulation detects vulnerabilities and attempts to exploit them? a. Red team-blue team exercise b. Vulnerability scanning c. Security audit d. Penetration testing
How does a vulnerability scan examine the current security posture? What is the most popular vulnerability scanning engine? Is it an application that is requested by employers on job sites?
Which vulnerability-finding method works best? Why?
How does a vulnerability scan evaluate the current level of security? Which vulnerability scanner is the most extensively used? Is it an application that employers search for on job boards?
Choose the best attack vector a) Give vulnerability information. b) What can be gained via the attack vector? c) Why did you choose to exploit thisvulnerability? d) How you would carry out the exploit.
The identification and documentation of four sources of vulnerability intelligence are necessary. Which approach, in your view, seems to be more successful? Why?
Which of the following statements are FALSE regarding the process of managing cyber security incidents? a. The containment phase is concerned with limiting the ongoing damage from the incident. b. An incident report is produced as part of the recovery phase.. c. Weaknesses that are identified as leading to d. An event must be classified as an incident before a response is mobilis
Four sources of vulnerability intelligence should be listed and described. Which seems to be the most advantageous? Why?
Imagine if Jim was going to be infected by a virus that was going to be attached to an email and sent to him. Can you talk about this attack in terms of vulnerabilities, threats, and the agents of those threats?