CySA+ Vulnerability Scan Types and Scheduling

1. Which scan type is most appropriate for initial reconnaissance of an unknown network?

Intrusive credentialed scan

Non-credentialed discovery scan

Full system audit scan

Compliance validation scan

Submit

3. What is the primary purpose of scheduling different scan types across the vulnerability management lifecycle?

To confuse attackers

To balance discovery, assessment, and compliance across risk levels

To reduce the number of vulnerabilities

To eliminate all false positives

4. When should emergency or ad-hoc vulnerability scans be performed?

Only during monthly maintenance windows

After a suspected breach or when a critical vulnerability is disclosed

Never, only scheduled scans are permitted

Only on test systems

Submit

6. Which of the following is a disadvantage of passive scanning?

Causes system performance issues

May miss vulnerabilities that require active probing

Requires administrator credentials

Generates excessive false positives

Submit

8. Which scanning approach is least disruptive but provides limited visibility into system internals?

Credentialed active scan

Non-credentialed active scan

Passive scan

Authenticated network scan

9. What does CVSS score help determine in vulnerability management?

The cost of remediation

The severity and prioritization of vulnerabilities

The type of scanning tool needed

The number of affected users

Submit

11. Which scan type provides the most comprehensive vulnerability assessment by actively testing system responses?

Passive scan

Active scan

Credentialed scan

Network enumeration

Submit

13. What is the primary risk of running high-intensity scans during business hours?

Increased accuracy of results

System performance degradation and service disruption

Lower false positive rates

Faster vulnerability detection

14. Which of the following best describes a web application vulnerability scan?

Tests network layer protocols only

Identifies application-level flaws like SQL injection and XSS

Scans firmware vulnerabilities

Monitors physical security controls

Submit

16. What is a key consideration when scheduling vulnerability scans in a production environment?

Scans should run continuously

Coordinate with change management and system owners

Always use maximum scan intensity

Never schedule during weekdays

17. Which scanning approach uses network traffic analysis without sending probes to target systems?

Active scanning

Passive scanning

Credentialed scanning

Authenticated scanning

Submit

19. Intrusive scans should be scheduled during which time window to minimize business impact?

Peak business hours

Maintenance windows outside production hours

Random times for unpredictability

Quarterly only

20. What is the primary advantage of a credentialed scan over an unauthenticated scan?

Lower network bandwidth usage

Access to internal system configurations and patch levels

Faster scan completion time

Reduced false positive rates only

CySA+ Vulnerability Scan Types and Scheduling Quiz

1. Which scan type is most appropriate for initial reconnaissance of an unknown network?

2.

What first name or nickname would you like us to use?

2. Authenticated scans provide deeper insight into system vulnerabilities because they access system ____.

3. What is the primary purpose of scheduling different scan types across the vulnerability management lifecycle?

4. When should emergency or ad-hoc vulnerability scans be performed?

5. A vulnerability scan that tests for compliance with security policies is called a ____ scan.

6. Which of the following is a disadvantage of passive scanning?

7. Vulnerability scans should be scheduled at regular ____ to track remediation progress.

8. Which scanning approach is least disruptive but provides limited visibility into system internals?

9. What does CVSS score help determine in vulnerability management?

10. A compliance scan verifies that systems meet regulatory ____.

11. Which scan type provides the most comprehensive vulnerability assessment by actively testing system responses?

12. Baseline scans are used to establish a ____ of the current vulnerability state.

13. What is the primary risk of running high-intensity scans during business hours?

14. Which of the following best describes a web application vulnerability scan?

15. Credentialed scans require valid user ____ to access system internals.

16. What is a key consideration when scheduling vulnerability scans in a production environment?

17. Which scanning approach uses network traffic analysis without sending probes to target systems?

18. A passive vulnerability scan differs from an active scan in that it ____.

19. Intrusive scans should be scheduled during which time window to minimize business impact?

20. What is the primary advantage of a credentialed scan over an unauthenticated scan?