Pentest Scan Quiz: Can You Find The Hole?

1. What is a zero-day vulnerability?

A flaw discovered today by your team

A previously unknown vulnerability with no patch available

A vulnerability fixed within 24 hours

A false positive finding

2. What is the relationship between Vulnerability Scanning (PenTest+) and overall security posture?

Scanning is the only security control needed

Scanning identifies risks; remediation improves posture

Scanning has minimal impact on security

Scanning prevents all attacks

3. Which element is critical for successful vulnerability remediation tracking?

Ignoring low-severity findings

Establishing metrics and SLAs for fixes

Scanning only once per year

Keeping findings confidential

4. How does a vulnerability scanner typically identify weaknesses?

By manually reviewing source code

By comparing system configurations against known vulnerability signatures

By interviewing system administrators

By observing user behavior

5. What information should be included in a vulnerability scan report?

Only critical findings

Findings, severity, remediation guidance, and timestamps

Scan duration and tool version only

Personal opinions of the tester

6. Which scanning approach poses the highest risk to system stability?

Passive reconnaissance

Credentialed scanning with low intensity

Aggressive intrusive scanning

Port enumeration only

7. What is the purpose of a vulnerability baseline in scanning?

To establish a reference point for tracking changes

To prevent all future vulnerabilities

To eliminate the need for scans

To reduce scan execution time

8. Which factor most affects vulnerability scanner accuracy?

Time of day the scan runs

Proper configuration and updated plugin databases

Network bandwidth available

Number of users on the network

9. What does remediation mean in vulnerability management?

Reporting vulnerabilities to management

Fixing or mitigating identified vulnerabilities

Scanning the network again

Documenting findings only

10. Which scanning technique is best for identifying missing security patches?

Port scanning only

Compliance and configuration scanning

Passive traffic analysis

Physical security audit

11. What is the primary goal of vulnerability scanning in penetration testing?

Identify weaknesses in systems and networks

Fix all discovered vulnerabilities immediately

Encrypt all network traffic

Replace outdated software

12. Which protocol is typically scanned to detect web application vulnerabilities?

SMTP

HTTP/HTTPS

DNS

SNMP

13. What is the difference between authenticated and unauthenticated scanning?

No meaningful difference in results

Authenticated scans use credentials; unauthenticated do not

Unauthenticated scans are always more thorough

Authenticated scans are less reliable

14. Which vulnerability severity level requires immediate remediation?

Low

Medium

Critical

Informational

15. What should be done before conducting vulnerability scans in production?

Obtain written authorization and plan downtime

Scan immediately without notification

Test only on weekends

Inform users verbally

16. Which scanning method minimizes network disruption during assessment?

Aggressive full-port scanning

Credentialed scanning with reduced intensity

Denial-of-service testing

Random packet flooding

17. What is a false positive in vulnerability scanning?

A real vulnerability that was detected

A reported vulnerability that doesn't actually exist

A vulnerability scanner malfunction

An unpatched system flaw

18. Which tool is commonly used for network vulnerability scanning?

Nessus

Wireshark

Git

Docker

19. What does CVSS stand for in vulnerability assessment?

Common Vulnerability Severity Score

Common Vulnerability Scoring System

Critical Vulnerability Security Standard

Comprehensive Vulnerability Scan Suite

20. Which scanning approach provides the most comprehensive vulnerability assessment?

Passive reconnaissance only

Active scanning with full network access

Manual code review alone

Perimeter firewall analysis

Pentest Scan Quiz: Can You Find the Hole?