Chapter 9: Performing Vulnerability Assessments

Security+ Chapter 9

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Start

Congratulations - you have completed Security+ Chapter 9. You scored %%SCORE%% out of %%TOTAL%%.

Your answers are highlighted below.

Question 1

What can ICMP be used for?

A	MAC address spoofing
B	SYN flood
C	Port manipulation
D	Ping sweeps

Question 2

What are your options in respect to risk?

A	Deny, disrupt, or delay
B	Diminish, transfer, or accept
C	Accept, mitigate, or completely eliminate
D	Transfer, accept, or concede

Question 3

What is the likelihood that a threat agent will expolit a vulnerability?

A	Risk
B	Vulnerability
C	Threat
D	Weakness

Question 4

Why would you have one of your employees use a password cracker?

A	Embarrass people who use weak passwords
B	Instill fear in users
C	Test the strength of passwords
D	Protect against tampering

Question 5

You can determine your Single Loss Expectancy (SLE) by multiplying the value of your assets by the _____________ of those assets.

A	Loss expectancy
B	Risk priority
C	Security posture
D	Exposure value

Question 6

The goal of risk management is to completely eliminate risk.

A	True
B	False

Question 7

Tools such as port scanners, network mappers, protocol analyzers, vulnerability scanners, and password crackers are used during a

A	Risk management
B	Vulnerability assessment
C	Asset inventory
D	These are not legitimate tools

Question 8

A vulnerability appraisal is a snapshot of your organizations security posture. During this appraisal your vulnerabilities are looked at in respect to

A	Risk Assessment Codes
B	Threats
C	Exposure values
D	Risk

Question 9

What tool can be used to analyze network traffic and would be able to view plain text passwords that are sent in the clear?

A	Protocol analyzer
B	Port scan
C	Ping sweep
D	Network mapper

Question 10

How can you determine your Annualized Loss Expectancy?

A	Add your Single Loss Expectancy (SLE) to your Annualized Rate of Occurance (ARO).
B	You don't need to, your command will do this for you.
C	Divide your Single Loss Expectancy (SLE) by the Annualized Rate of Occurance (ARO).
D	Multiply your Single Loss Expectancy (SLE) by the Annualized Rate of Occurance (ARO).

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 10 questions to complete.

Technical Training Courses

Chapter 9: Performing Vulnerability Assessments

Security+ Chapter 9

Security+

Contact the Instructor

Book Reviews

Useful Links