stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Enterprise_Defense_Midterm_Revission_2025 Flashcards | StudBud
Explore
/
Enterprise_Defense_Midterm_Revission_2025
Enterprise_Defense_Midterm_Revission_2025
30 terms
·
StudBud Administration
·
32 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
Why do organizations prioritize assets before scanning?
To patch everything at once
To avoid regulations
To delay patching
To focus on critical systems
2
Which scan gives more insight into internal weaknesses?
External scan
Authenticated scan
Randomized scan
Non-intrusive scan
3
What is a false positive in an intrusion detection system?
Blocking safe traffic by mistake
Detecting hidden users
Ignoring real threats
Allowing known malware
4
Which of the following scans would detect issues in mobile apps?
IoT scan
Host-based scan
App-based scan
Network-based scan
5
What does OpenVAS stand for?
Open Virtual Audit Service
Online Verification & Assessment Suite
Open Vulnerability Assessment Scanner
Operational Vulnerability Access System
6
What makes internal scans valuable?
They focus on external apps
They cost more
They bypass firewall rules
They detect issues only insiders could exploit
7
Why do companies offer bug bounty programs?
To reward hackers for finding flaws
To punish poor coders
To reduce system speed
To pay for scanning tools
8
What’s the first step before scanning a network for vulnerabilities?
Report writing
Asset Inventory
Fixing old bugs
Firewall configuration
9
What does asset inventory help avoid?
Leaving systems unprotected
Scanning public IPs
Writing long reports
Patching third-party tools
10
Which is NOT a core network component?
Firewalls
Network servers
Web applications
Wireless access points
11
What’s a benefit of regularly updating vulnerability feeds in tools like OpenVAS?
Lower scan duration
Faster reporting
Detection of latest threats
Access to new features
12
What is the main purpose of enterprise networks in organizations?
Enable staff communication and coordination
Store marketing data
Recruit new employees
Handle salary payments
13
What does 'Actionability' mean in a scan report?
Scan duration
Steps you can take to fix issues
Detailed charts
Number of pages
14
A vulnerability with remote exploitability is considered...
High risk
Not worth fixing
Low risk
Hardware-based
15
Penetration testing vs vulnerability scanning — what’s the key difference?
Pentests simulate attacks; scans identify weaknesses
Scans are manual, pentests are automatic
Pentests only work on Linux
They are exactly the same
16
The Gartner security model is best described as...
A backup strategy
An alerting protocol
A cycle of security activities
A one-time checklist
17
What type of scan would help secure your external-facing login page?
Continuous
External
Host-based
Internal
18
What could happen if a business doesn’t track its assets properly?
Increased cybersecurity risks
Better time management
Stronger firewall
Risk of running out of coffee
19
Which phase comes after remediation in the scanning process?
Verification and Monitoring
Reporting
Asset classification
Inventory
20
What helps detect unusual network activity?
Ignoring logs
Checking social media
Creating a baseline and spotting deviations
Only using signatures
21
What does CVSS help you determine about a vulnerability?
Its location in the network
Its severity level
Who discovered it
How long it’s existed
22
What is the goal of a Post-Incident Review (PIR)?
Increase password length
Improve future response
Create new attacks
Reward employees
23
Which team in cybersecurity is responsible for active defense?
Blue Team
Purple Team
Green Team
Red Team
24
Which method is least effective for detecting new, unknown threats?
Find Known Bad stuff
Behavior-based detection
Anomaly analysis
Machine learning
25
How does an IDS differ from an IPS?
IDS alerts; IPS blocks
IDS uses more CPU
IPS detects malware faster
IDS blocks attacks immediately
26
Why must the blue team stay alert around the clock?
Firewalls block everything
Systems are self-defending
Hackers attack only during work hours
Threats can happen anytime
27
Proactive security refers to...
Blocking known attacks
Reacting after an incident
Preventing threats before they occur
Waiting for systems to fail
28
Vulnerability scanning is important because...
It lowers the chance of attacks by fixing weaknesses early
It generates revenue
It tracks how fast the internet is
It avoids software updates
29
What does an Intrusive Scan attempt?
Avoiding detection
Encrypting files
Exploiting vulnerabilities
Generating documentation
30
Why must vulnerability scanning be a continuous cycle?
Networks never change
It increases downtime
New threats emerge constantly
Once is enough
