Network+ Patch Management and Vulnerability Scanning

1. What is the main advantage of credentialed vulnerability scanning?

Access to system internals for deeper assessment

Faster scanning speed

Lower network bandwidth usage

No false positives reported

2. What should be documented after each patch deployment cycle?

Systems patched, success/failure rates, and issues encountered

Only failed patches

Vendor contact information

Hardware serial numbers

3. Which scanning approach uses authenticated credentials to access system information?

Authenticated scanning

Passive reconnaissance

Port enumeration

Traffic analysis

4. A vulnerability is discovered affecting only legacy systems no longer supported. What should be considered?

Risk acceptance or system decommissioning

Immediate patching regardless of support status

Ignoring the vulnerability entirely

Waiting for vendor support renewal

5. What is the primary risk of delaying critical patch deployment?

Increased likelihood of exploitation by threat actors

Slower network performance

Higher hardware costs

Reduced employee productivity

6. Which approach involves testing patches in a controlled environment before production deployment?

Test lab or sandbox environment

Direct production deployment

User acceptance testing only

Vendor pre-release programs

7. Nessus and OpenVAS are examples of what type of tools?

Vulnerability scanners

Packet analyzers

Configuration managers

Load balancers

8. What is a false positive in vulnerability scanning?

A reported vulnerability that doesn't actually exist

A real vulnerability that remains undetected

A patch that fails to install correctly

A scan that completes without errors

9. Which metric helps prioritize vulnerabilities based on exploitability and impact?

CVSS score

Ping latency

Bandwidth utilization

CPU temperature

10. Patch Tuesday typically refers to which day for Microsoft updates?

Second Tuesday of each month

First Tuesday of each month

Last Tuesday of each month

Every Tuesday without schedule

11. What is the primary purpose of vulnerability scanning in network operations?

To identify security weaknesses and misconfigurations

To physically inspect network hardware

To replace outdated network devices

To increase network bandwidth capacity

12. Which scanning type actively probes systems and may disrupt services?

Intrusive scanning

Passive scanning

Non-credentialed scanning

Authenticated scanning

13. A network administrator discovers a critical vulnerability affecting 50 systems. What should be the first action?

Assess business impact and create remediation plan

Wait for the next scheduled patch window

Immediately shut down all affected systems

Document the vulnerability for future reference

14. Which compliance framework requires regular vulnerability assessments?

PCI-DSS

DHCP

DNS

HTTP

15. What is a zero-day vulnerability?

A flaw unknown to vendors with no available patch

A vulnerability discovered 24 hours before patching

A patch released on the same day as discovery

A vulnerability affecting systems for zero seconds

16. Patch management is most critical for which type of systems?

Internet-facing and critical infrastructure

Offline development machines

Legacy systems no longer in use

Test environments only

17. Which tool is commonly used to scan networks for open ports and services?

Nmap

Ping

Tracert

Ipconfig

18. What does CVSS stand for in vulnerability assessment?

Common Vulnerability Scoring System

Cyber Vulnerability Security Standard

Critical Vulnerability Severity Scale

Compliance Vulnerability Scanning System

19. A vulnerability with CVSS score 7.5 is classified as which severity level?

Low

High

Critical

Medium

20. Which patch management strategy deploys updates to a subset of systems before full deployment?

Phased rollout

Emergency patching

Zero-day patching

Reactive patching

Network+ Patch Management and Vulnerability Scanning Quiz