stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ 701 Lesson 8 Vulnerability Management Flashcards | StudBud
Explore
/
Sec+ 701 Lesson 8 Vulnerability Management
Sec+ 701 Lesson 8 Vulnerability Management
27 terms
·
StudBud Administration
Domain 4.3
Flashcards
27 cards
F
Practice quiz
P
Host live
L
Questions
27
Answers
1
What is the most effective way to remediate a vulnerability?
Block the port
Disable the service
Apply a patch
All of the above
2
Vulnerability remediation does not involve applying patches or fixes to vulnerabilities.
False
True
3
The National Vulnerability Database (NVD) is a comprehensive database of known vulnerabilities.
False
True
4
Vulnerability remediation is a one-time task.
False
True
5
What is the name of the scoring system used to classify the severity of vulnerabilities?
CVE
NIST
CWE
CVSS
6
What is the name of the framework that provides guidelines for vulnerability management?
COBIT
HIPAA
NIST Cybersecurity Framework
ISO 27001
7
What type of scan is used to identify vulnerabilities in a system without exploiting them?
Compliance scan
Penetration test
Network scan
Vulnerability scan
8
Which of the following is a benefit of implementing a vulnerability management program?
Enhanced incident response
Reduced risk of data breaches
Improved compliance
All of the above
9
Vulnerability management is a critical component of an organization's cybersecurity posture.
True
False
10
What is the name of the process that involves verifying the existence of a vulnerability?
Compliance scanning
Vulnerability scanning
Vulnerability validation
Penetration testing
11
Vulnerability management is a one-person task.
False
True
12
No tool can identify all vulnerabilities, as new vulnerabilities are discovered regularly.
True
False
13
Vulnerability scanning is a key step in vulnerability management.
False
True
14
Which of the following is an example of a vulnerability management tool?
Nessus
All of the above
Nmap
Burp Suite
15
What type of tool is used to identify vulnerabilities in a system?
Network monitoring tool
Compliance scanning tool
Penetration testing tool
Vulnerability scanner
16
Vulnerability management tools can identify all vulnerabilities.
True
False
17
Vulnerability management is only necessary for large organizations.
False
True
18
Risk-based vulnerability management involves prioritizing vulnerabilities based on their risk.
True
False
19
What is the name of the database that stores information about known vulnerabilities?
CVE
NVD
CWE
CVSS
20
Which of the following is a best practice in vulnerability management?
All of the above
Scan regularly
Prioritize vulnerabilities based on risk
Remediate vulnerabilities promptly
21
What is the primary goal of vulnerability management?
To detect all vulnerabilities
To ignore vulnerabilities
To prioritize and remediate vulnerabilities based on risk
To remediate all vulnerabilities immediately
22
As with Heartbleed, a vulnerability scan identifies system weaknesses.
False
True
23
All vulnerabilities should be remediated immediately.
True
False
24
Which of the following is a benefit of vulnerability management?
Increased compliance
Reduced risk
Improved incident response
All of the above
25
What is the primary metric used to measure the effectiveness of a vulnerability management program?
All of the above
Time to remediate vulnerabilities
Number of vulnerabilities remediated
Number of vulnerabilities identified
26
Remediation should be prioritized based on risk, as stated by Cybersecurity and Infrastructure Security Agency (CISA).
False
True
27
What is the primary challenge in vulnerability management?
All of the above
Identifying vulnerabilities
Prioritizing vulnerabilities
Remediating vulnerabilities
