Vulnerability Analysis
15 practice questions under this official exam objective (312-50v12, 312-50v13), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
15 total · page 1 of 1Vulnerability Assessment Report Components
This question tests the specific documentation requirements for a vulnerability assessment report versus a penetration test. The correct answer is B,
Risk of Host Misconfigurations: Debugging and Admin Permissions
This analysis addresses the risks associated with host misconfigurations, specifically enabled debugging functions and unauthorized administrative acc
What Follows a Completed TCP Handshake During Scanning?
This CEH 312-50v12 question tests what an ethical hacker does immediately after completing a TCP three-way handshake (SYN → SYN/ACK → ACK) with an ope
Choosing a Vulnerability Assessment Solution for an External View
This analysis identifies the correct vulnerability assessment solution for an organization needing an external attacker perspective, inference-based t
Limitations of Vulnerability Assessment in Legacy and Default Configurations
This question examines the critical limitations of vulnerability scanning software when dealing with legacy applications and insecure protocols. It es
Agent-Based vs Network-Based Vulnerability Scanners
This question distinguishes between agent-based and network-based vulnerability assessment tools based on installation location and scanning scope. It
What Is the Correct Sequence of Vulnerability-Management Life Cycle Steps?
The vulnerability-management life cycle begins with identifying assets and creating a baseline, then scans, assesses risk, remediates, verifies and fi
CVSS Metric Types: Base, Temporal, and Environmental
This question tests the understanding of CVSS metric categories, specifically distinguishing between Base, Temporal, and Environmental metrics. It est
Best Initial Approach to Vulnerability Assessment
This question explores the prioritization of vulnerability assessment techniques when patches and training are already in place, establishing that con
Best Vulnerability Tool for Hybrid On-Prem and Cloud Networks
This question asks which vulnerability assessment tool best fits a hybrid on-premise and cloud environment with continuous scanning and change monitor
Inference-Based Vulnerability Assessment Process
This question defines Inference-Based Assessment, a vulnerability scanning method that dynamically selects tests based on discovered protocols and ser
What is the CVSS v3.1 Medium Severity Range?
In the Common Vulnerability Scoring System (CVSS) v3.1, medium severity vulnerabilities are assigned specific numerical scores. This page establishes
Which Tool Does Jack Use for Automated Web Server Vulnerability Scanning?
Jack needs an automated scanner that discovers hosts, services, and weaknesses on a target web server. Netsparker is the only option in the list that
Mitigating TOC/TOU Race Condition Vulnerabilities
This CEH question presents an audit finding that includes time of check/time of use (TOC/TOU) errors and asks which remediation directly closes that s
Speculative Execution Side-Channel Attack Identification
This question tests the identification of speculative execution attacks like Spectre and Meltdown, which are classified as side-channel attacks. The c