Security+ SY0-801
Vulnerability Management and Monitoring
Vulnerability management
- What is a vulnerability scanner used for? Easy
- What is an authenticated vulnerability scan? Easy
- What does cloud security posture management (CSPM) monitor? Easy
- What does IPAM stand for, and how does it help with vulnerability management? Easy
- A scanner reports a flaw that does not exist on the system at all. What is this called? Easy
- What is the usual first way to fix a known software flaw? Easy
- Why is a system scanned again after patching? Easy
- What is a bug bounty program? Easy
Vulnerability management
Vulnerability management
- A scan finds the same flaw with CVSS 7.8 on 300 servers. It requires local access. 20 of these servers are terminal servers with many users. How do you prioritize? Hard
- A scanner reports a flaw in the OpenSSL package on a Linux server, but the distribution vendor applied the fix via a backport and the version number stayed the same. What is this, and what should be done? Hard