Ethical Hacking: Penetration Testing Methodology Quiz

Quiz: Vulnerability Analysis

Pass mark: 70%. You can retry as many times as you need.

1 What does a CVE identifier actually represent? Single answer A unique identifier for one specific, publicly known weakness A tool that automatically fixes vulnerable software A private list shared only between attackers

2 Why is a matching CVE record, based only on a banner's version string, not enough to report a finding as confirmed? Single answer Because CVE records are usually inaccurate Because the version information itself is only a hypothesis that needs direct verification Because CVE records never include a severity score

3 Which limitations do automated vulnerability scanners typically have? (several answers) Multiple answers possible They can produce false positives based on imprecise version matching They reliably detect business logic flaws, such as a flawed discount process They generally cannot judge whether a finding matters in the client's specific business context They always run without generating any load on the target

4 In which situation should a tester favour manual analysis over automated scanning? Single answer When checking thousands of pages for the exact same known, patched weakness When testing whether a business process, such as a loan approval workflow, can be abused When running a recurring, scheduled quarterly check across many hosts

5 Which factors should be combined to prioritise targets before exploitation? (several answers) Multiple answers possible The likely severity of the finding Whether the target is reachable only internally or also from the internet The business value of the data or function involved Only the raw CVSS score, ignoring everything else