46.
Tom is reviewing a vulnerability scan report and finds that
one of the servers on his network suffers from an internal IP
address disclosure vulnerability. What protocol is likely in use
on this network that resulted in this vulnerability?
- A.TLS
- B.NAT
- C.SSH
- D.VPN
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| Although the network can support any of these protocols, internal IP disclosure vulnerabilities occur when a network uses Network Address Translation (NAT) to map public and private IP addresses but a server inadvertently discloses its private IP address to remote systems. |
47.
Which one of the CVSS metrics would contain information
about the number of times that an attacker must successfully
authenticate to execute an attack?
- A.AV
- B.C
- C.Au
- D.AC
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| The authentication metric describes the authentication hurdles that an attacker would need to clear to exploit a vulnerability. |
48.
Which one of the following values for the CVSS access
complexity metric would indicate that the specified attack is
simplest to exploit?
- A.High
- B.Medium
- C.Low
- D.Severe
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| An access complexity of “low” indicates that exploiting the vulnerability does not require any specialized conditions. |
49.
Which one of the following values for the confidentiality,
integrity, or availability CVSS metric would indicate the
potential for total compromise of a system?
- A.N
- B.A
- C.P
- D.C
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| If any of these measures is marked as C, for Complete, it indicates the potential for a complete compromise of the system. |
50.
What is the most recent version of CVSS that is currently
available?
- A.1.0
- B.2.0
- C.2.5
- D.3.0
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| Version 3.0 of CVSS is currently available but is not as widely used as the more common CVSS version 2.0. |
|
|
||||||||||||||||||||||||||||
