Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Sans Discussions
exam questions

Exam SEC504 All Questions

View all questions & answers for the SEC504 exam
Go to Exam

Exam SEC504 topic 1 question 5 discussion

Actual exam question from SANS's SEC504
Question #: 5
Topic #: 1
[All SEC504 Questions]

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You use Nessus as a vulnerability scanning program to fix the vulnerabilities. Which of the following vulnerabilities can be fixed using
Nessus?
Each correct answer represents a complete solution. Choose all that apply.

  • A. Misconfiguration (e.g. open mail relay, missing patches, etc.)
  • B. Vulnerabilities that allow a remote cracker to control sensitive data on a system
  • C. Vulnerabilities that allow a remote cracker to access sensitive data on a system
  • D. Vulnerabilities that help in Code injection attacks
Show Suggested Answer Hide Answer
Suggested Answer: ABC 🗳️
by cleavzz at Nov. 16, 2020, 8:22 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
ExamCheat
1 year, 6 months ago
Nessus is also able to detect code injection vuln - https://www.tenable.com/plugins/was/families/Code%20Execution
upvoted 1 times
...
cleavzz
4 years ago
The question is worded in a way where it states Nessus will resolve a vulnerability when Nessus is purely a network vulnerability scanner.
upvoted 3 times
saucehozz
2 years, 8 months ago
would you say it's [A - Misconfigurations] then?
upvoted 1 times
anonyuser
1 year, 7 months ago
A B and C seem correct to me. The previous comment by cleavzz is correct though - the question implies Nessus is capable of fixing things. It's not really fixing anything, it just scans the system for issues that need to be fixed. It is just a poorly worded question. A is obvious. B and C make sense because vulnerabilities could be those that allow both control or access to sensitive data.
upvoted 1 times
...
...
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel