ISOL 533 -Which of the following statements is true regarding
\nQuestion 1
\nWhich of the following statements is true regarding the use of service patches?
\nService patches are an ineffective means of fixing a server\u2019s vulnerability.
\nApplying a patch to a server guarantees that a risk has been mitigated.
\nThe system administrator has no way of verifying that the patch has raised the version number.
\nThe system administrator can directly test a patch\u2019s effectiveness to assure that the vulnerability is closed.<\/p>\n
10 points<\/p>\n
Question 2
\nIn the Lab 5 Nmap Scan Report, what was the total number of loaded scripts for scanning?
\n4
\n36
\n72
\n100<\/p>\n
10 points<\/p>\n
Question 3
\nIn the Lab 5 Nmap Scan Report, what is the source IP address of the Cisco Adaptive Security Appliance device?
\n172.16.20.1
\n172.17.20.1
\n172.20.20.1
\n172.30.0.1<\/p>\n
10 points<\/p>\n
Question 4
\nThe Nmap operator can infer what services are running by knowing:
\npotential attackers motives.
\nwhat specific ports are listening.
\nwhat vulnerabilities are being targeted.
\nthe patches that are currently available.<\/p>\n
10 points<\/p>\n
Question 5
\nWhich of the following has one purpose: to send crafted packets to a targeted Internet Protocol (IP) address to determine what ports are listening for connections?
\nNessus
\nCVE
\nNmap
\nCisco ASA<\/p>\n
10 points<\/p>\n
Question 6
\nWhich of the following would a person with malicious intent use to research what vulnerabilities to exploit?
\nNessus
\nCVE
\nNmap
\nCisco ASA<\/p>\n
10 points<\/p>\n
Question 7
\nIn the Lab 5 Nessus Vulnerability Scan Report, how many IP hosts were identified in the Scan Report?
\n1
\n5
\n7
\n13<\/p>\n
10 points<\/p>\n
Question 8
\nIn the Lab 5 Nessus Vulnerability Scan Report, how many of the vulnerabilities found on the 172.16.20.1 host were ranked \u201ccritical\u201d?
\n0
\n1
\n2
\n4<\/p>\n
10 points<\/p>\n
Question 9
\nIn the Lab 5 Nessus Vulnerability Scan Report, how many of the vulnerabilities found on the 172.16.20.1 host were ranked \u201chigh\u201d?
\n0
\n1
\n6
\n9<\/p>\n
10 points<\/p>\n
Question 10
\nIn the Lab 5 Nessus Vulnerability Scan Report, how many open ports were found on the 172.30.0.10 host?
\n2
\n5
\n22
\n37<\/p>\n
10 points<\/p>\n
Question 11
\nIn the Lab 5 Nessus Vulnerability Scan Report for the 172.30.0.10 host, the first vulnerability found was: MS08-067 Microsoft Windows Server Service Crafted RPC Request Handling Remote Code Execution (958644) (uncredentialed check). What solution was provided for this vulnerability?
\nDisable this service if you do not use it.
\nFilter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
\nAccess this device and set a password using \u2018enable secret\u2019.
\nMicrosoft has released a set of patches for Windows 2000, XP, 2003, Vista and 2008.<\/p>\n
10 points<\/p>\n
Question 12
\nWhich of the following would produce more benefit from Nessus plug-ins?
\nUpdate the plug-ins on install.
\nUse only the default setting for updating the plug-ins.
\nDo not make any updates to the plug-ins.
\nDisable all plug-ins.<\/p>\n
10 points<\/p>\n
Question 13
\nWhich of the following statements is true regarding Nessus?
\nIt is difficult to install and run.
\nIt is cost-prohibitive for home use.
\nVery few plug-ins are available for it.
\nReporting can be detailed and customized.<\/p>\n
10 points<\/p>\n
Question 14
\nAs a vulnerability scanner, __________ scans the networked devices for potential weaknesses and exploitable services.
\nNessus
\nCVE
\nNmap
\nCisco ASA<\/p>\n
10 points<\/p>\n
Question 15
\nWhich of the following can be used as a compliance tool by loading a configuration file and then scanning the network to verify compliance against your end devices?
\nNessus
\nCVE
\nNmap
\nCisco ASA<\/p>\n
10 points<\/p>\n
Question 16
\nWhich of the following is a free, publicly available list or dictionary of standard identifiers for common computer vulnerabilities and exposures?
\nNessus
\nCVE
\nNmap
\nCisco ASA<\/p>\n
10 points<\/p>\n
Question 17
\nWhat does the acronym CVE stand for?
\nCommon Vulnerabilities and Exposures
\nCertified Vulnerability Enterprise
\nCentral Vulnerability Exposures
\nCenter for Vulnerabilities and Exposures<\/p>\n
10 points<\/p>\n
Question 18
\nAccording to CVE, which of the following is a mistake in software that can be directly used by a hacker to gain access to system or network?
\nThreat
\nVulnerability
\nExposure
\nRisk<\/p>\n
10 points<\/p>\n
Question 19
\nAccording to CVE, which of the following is a system configuration issue or a mistake in software that allows access to information or capabilities that can be used by a hacker as a stepping-stone into a system or network?
\nThreat
\nVulnerability
\nExposure
\nRisk<\/p>\n
10 points<\/p>\n
Question 20
\nThe letters \u201cASA\u201d in the Cisco ASA 5505 Security products stand for:
\nAugmented Server Apparatus.
\nAssessment Scanner Administration.
\nAdaptive Security Appliance.
\nAuthorized Service Application.<\/p>\n","protected":false},"excerpt":{"rendered":"
ISOL 533 -Which of the following statements is true regarding Question 1 Which of the following statements is true regarding the use of service patches? Service patches are an ineffective means of fixing a server\u2019s vulnerability. Applying a patch to Read More …<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-425","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/comments?post=425"}],"version-history":[{"count":0,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/425\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/media?parent=425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/categories?post=425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/tags?post=425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}