Exam PT1-002 topic 1 question 41 discussion

I'll go with B, no better validation than a POC.

Why wouldn't you just: A- Manually check the version number of the VoIP service against the CVE release to confirm the scan results? You're a pen-tester, so you will be able to obtain this information. If the versions match, you note down a vulnerability in your findings and suggest updates in line with the CVE recommendations as remediation.

I still don't see how A isn't the right answer. examtopics states, C is the correct answer.

It asks for: "Which of the following methods would BEST support validation of the possible findings?" In answer A you only check the version. This doesn't mean the system is necessarily affected. Might be a CVE that depends on certain configurations within the system. If it is not configured like in the CVE the system wouldn't be affected. In answer B you check if the system is actually affected by the CVE. Therefore this best supports the findings...

I think A correct

A and B are both correct, but you would want to validate the version number manually first to confirm the results and then test your findings

This one is TOUGH. D is out because nmap or something like it has already been run, that's where the question starts. It seems like both A and B are possible correct answers. We dont have a SOW so we don't know if the pentester is allowed to run an exploit. It could be either one. What I would do, would be manually check the version, (to verify the scanners results) THEN if needed, test with the POC. The question of the "possible presence" based on version number of the service, to BEST support VALIDATION of the possible findings." I am going with B. I hope I don't get this question on the test.

I think it's D since you want to eliminate false positives from an automated scanner. it's simply confirming with the nmap to see if it's matches same version or not

The question says "The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service." Why would you scan it again after you've already got service information from a previous scan? This is why the answer should be B