stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Vulnerability Analysis Flashcards | StudBud
Explore
/
Vulnerability Analysis
What SCAP can do?
Numerical score of CVSS is range from
Vulnerability Analysis
22 terms
·
StudBud Administration
·
28 plays
Imported from external platform
Flashcards
22 cards
F
Practice quiz
P
Host live
L
Questions
22
Answers
1
Numerical score of CVSS is range from
1.0 to 9.0
0.0 to 9.0
0.0 to 10.0
1.0 to 10.0
2
What SCAP can do?
All answers
Scale across environment & ensure compliance
Harden system configurations & Support continuous monitoring
Automate Security Tasks and generate detail report
3
What is the purpose of SCAP?
Automate & standardize sec assessment, vul-management & compliance
To encrypt sensitive data for secure transmission over the internet
To act as a firewall that blocks unauthorized access to networks
To provide real-time monitoring of network traffic and detect anomalies
4
Which framework allows for risk prioritization based on potential threat impact?
CIS Top 20 Critical Security Controls
OWASP Top 10
ISO 31000
NIST Cybersecurity Framework
5
Numeric range from 7.0 to 8.9 is .......
Low
High
Medium
Critical
6
What is the primary benefit of relying on SCAP?
It automates and standardizes security management.
It replaces all manual security assessments.
It provides real-time network traffic monitoring.
It acts as a firewall to prevent unauthorized access.
7
CVSS stand for Common Vulnerability Scoring System.
False
True
8
user downloads software that contains malware onto a computer that eventually infects numerous other systems.
User is an APT
User is a Script Kiddie
User is a Hactivist
User is an Insider Threat
9
Scoring methodology not change form version to version.
True
False
10
0-day vul exploited, no user interaction or priv-escalation, impact on Confidentiality & Integrity but not availability
CVSS: 31/AV: N/AC: L/PR: N/UI: N/S: U/C: H/I: H/A: L
CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H
CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
CVSS: 31/AV: N/AC: L/PR: N/UI: N/S: U/C: H/1: K/A: L
11
What type of vulnerability cannot be detected by vulnerability scanning tools?
True Positive
False Positive
True Negative
False Negative
12
A vulnerability scan incorrectly indicates that a vulnerability or misconfiguration is present when it is not.
True Negative
True Positive
False Positive
False Negative
13
SCAP created by ISO.
False
True
14
Physical (P), Local (L), Adjacent network (A), or Network (N) are all values for which base metric?
AC
AV
UI
CIA
15
Which one is the base matric of CVSS?
Asset value
Impact metric
Report confidence
True positive
16
After conducting a risk assess on new software request, risk score would be too high. CISO refused the software request.
Transfer
Accept
Avoid
Mitigate
17
What is the primary purpose of CVSS?
To monitor real-time network activity for intrusion detection
To encrypt sensitive data for secure storage
To prevent cyberattacks by blocking malicious traffic
To prioritize vulnerabilities based on their severity and impact
18
What is SCAP stand for?
Secure Configuration Audit Procedure
Security Control Assessment Protocol
Standard Cybersecurity Automation Process
Security Content Automation Protocol
19
What is the attack complexity identified in the following vector? CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
High
Low
Don't know
Medium
20
Numerical score mapped to qualitative rating: 4.0 to 6.9 is Medim
False
True
21
What is the impact to integrity identified in the following vector? CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
None
High
Don't know
Low
22
There are 4 categories of vulnerability validation.
False
True
