Exam SEC504 topic 1 question 5 discussion

Actual exam question from SANS's SEC504

Question #: 5
Topic #: 1

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You use Nessus as a vulnerability scanning program to fix the vulnerabilities. Which of the following vulnerabilities can be fixed using
Nessus?
Each correct answer represents a complete solution. Choose all that apply.

A. Misconfiguration (e.g. open mail relay, missing patches, etc.)
B. Vulnerabilities that allow a remote cracker to control sensitive data on a system
C. Vulnerabilities that allow a remote cracker to access sensitive data on a system
D. Vulnerabilities that help in Code injection attacks

Show Suggested Answer

Suggested Answer: ABC 🗳️

by cleavzz at Nov. 16, 2020, 8:22 p.m.

Comments

Submit Cancel

ExamCheat

1 month, 3 weeks ago

Nessus is also able to detect code injection vuln - https://www.tenable.com/plugins/was/families/Code%20Execution

upvoted 1 times

...

cleavzz

2 years, 7 months ago

The question is worded in a way where it states Nessus will resolve a vulnerability when Nessus is purely a network vulnerability scanner.

upvoted 3 times

saucehozz

1 year, 4 months ago

would you say it's [A - Misconfigurations] then?

upvoted 1 times

anonyuser

2 months, 1 week ago

A B and C seem correct to me. The previous comment by cleavzz is correct though - the question implies Nessus is capable of fixing things. It's not really fixing anything, it just scans the system for issues that need to be fixed. It is just a poorly worded question. A is obvious. B and C make sense because vulnerabilities could be those that allow both control or access to sensitive data.

upvoted 1 times

...

Exam SEC504 All Questions

View all questions & answers for the SEC504 exam

Exam SEC504 topic 1 question 5 discussion

Comments

ExamCheat

cleavzz

saucehozz

anonyuser

SY0-701