Explain various activities associated with vulnerability management.
7 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
7 total · page 1 of 1Validating a Telnet Cleartext Finding as a False Positive
This SY0-701 scenario tests vulnerability-validation skills: an Nmap `--script telnet-encryption` check shows the reported Telnet service supports enc
Is a Telnet Scan Finding a False Positive After Nmap Encryption Test?
A vulnerability scanner flags a host's Telnet service as an insecure cleartext protocol, and the analyst's follow-up Nmap telnet-encryption test shows
Vulnerability Prioritization: CVSS vs Exposure Factor
This SY0-701 question tests vulnerability prioritization, and the defensible choice is CVSS (B) because it supplies a standardized severity score for
Vulnerability Scan False Positive Identification
A vulnerability scan that reports a vulnerability which does not actually exist on the target system is a false positive. This page establishes why th
What Defines the Terms of a Third-Party Penetration Test?
Rules of engagement (RoE) is the document that spells out the scope, authorization, timing, and constraints of a penetration test performed by a third
Which Testing Team Blends Offensive and Defensive Work With Developers?
SY0-701 team-color questions require matching each colored team to its function: the yellow team combines offensive and defensive perspectives while w
How Does Patching Switch OS, Servers, and Endpoint Definitions Prevent Attacks?
Patching switch OS, server OS, and endpoint definitions closes vulnerabilities that already have fixes. This page establishes that those update action