ECSAv10 Vulnerability Practice Questions

What is the difference between penetration testing and vulnerability testing?

• AA. Penetration testing goes one step further than vulnerability testing; while vulnerability tests check for known vulnerabilities, penetration testing adopts the concept of ‘in-depth ethical hacking’
• BB. Penetration testing is based on purely online vulnerability analysis while vulnerability testing engages ethical hackers to find vulnerabilities
• CC. Vulnerability testing is more expensive than penetration testing
• DD. Penetration testing is conducted purely for meeting compliance standards while vulnerability testing is focused on online scans

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels. A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack. Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

• AA. Passive Assessment
• BB. Host-based Assessment
• CC. External Assessment
• DD. Application Assessment