CPQ – Chapter 15 – Flashcards

____________________ for organizations are intended to identify vulnerabilities and alert network administrators to these problems.

Most vulnerability scanners maintain a(n) ____________________ that categorizes and describes the vulnerabilities that it can detect.

When using a black box test, many testers use ____________________ tricks to learn about the network infrastructure from inside employees.

A(n) ____________________ box test is one in which some limited information has been provided to the tester.

In a __________ test, the tester has no prior knowledge of the network infrastructure that is being tested.

The first step in a vulnerability assessment is to determine the assets that need to be protected.

If TCP port 20 is open, then an attacker can assume that FTP is being used.

Vulnerability scans are usually performed from outside the security perimeter.

A healthy security posture results from a sound and workable strategy toward managing risks.

During a vulnerability assessment, what type of software can be used to search a system for port vulnerabilities? a. port scanner b. vulnerability profiler c. threat scanner d. application profiler