Exam 312-50v13 topic 1 question 54 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 54
Topic #: 1

Jude, a pen tester, examined a network from a hacker’s perspective to identify exploits and vulnerabilities accessible to the outside world by using devices such as firewalls, routers, and servers. In this process, he also estimated the threat of network security attacks and determined the level of security of the corporate network. What is the type of vulnerability assessment that Jude performed on the organization?

A. Application assessment
B. External assessment
C. Passive assessment
D. Host-based assessment

Show Suggested Answer

Suggested Answer: B 🗳️

by e30b32d at May 20, 2025, 5:27 p.m.

Comments

Submit Cancel

e30b32d

1 month, 1 week ago

Selected Answer: B

Types of Vulnerability Assessment - External Assessment External assessment examines the network from a hacker’s point of view to identify exploits and vulnerabilities accessible to the outside world. These types of assessments use external devices such as firewalls, routers, and servers. An external assessment estimates the threat of network security attacks from outside the organization. It determines the level of security of the external network and firewall. (P.527/511)

upvoted 2 times

e30b32d

1 month, 1 week ago

Jude performed an evaluation of the organization's public-facing infrastructure — such as firewalls, routers, and servers — from an outsider’s perspective (i.e., like a hacker). This type of assessment aims to: Identify vulnerabilities visible to external attackers Estimate the risk of network security attacks Assess internet-facing systems This is exactly what an external assessment involves.

upvoted 1 times

...