Exam 312-49 topic 1 question 164 discussion

Actual exam question from ECCouncil's 312-49

Question #: 164
Topic #: 1

Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test.
The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

A. False negatives
B. False positives
C. True negatives
D. True positives

Show Suggested Answer

Suggested Answer: A 🗳️

by apetro76 at Dec. 25, 2020, 9:33 p.m.

Comments

Submit Cancel

stickerbush1970

2 years ago

The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis? Since the second utility is executing 5 Known exploits (TRUE), were not exploitable (NEGATIVE).

upvoted 1 times

jaycc

2 years ago

the true/false/positive/negative thing can get confusing, it's best to think of it in terms of access control: TRUE positive = a correctly established positive result (authorised person is granted access) TRUE negative = a correctly established negative result (unauthorised person is not granted access) FALSE positive = an incorrectly established positive result (unauthorised person is granted access) FALSE negative = an incorrectly established negative result (an authorised person is not granted access) this concept applied to the question would be a false negative - the scanner incorrectly (false) established that these vulnerabilities were not exploitable (negative).

upvoted 4 times

AkrAm_FetyAn

1 year, 8 months ago

totally wrong jaycc • True positive: A worm is spreading on a trusted network; NIDS alerts • True negative: User surfs the Web to an allowed site; NIDS is silent • False positive: User surfs the Web to an allowed site; NIDS alerts • False negative: A worm is spreading on a trusted network; NIDS is silent

upvoted 2 times

...

apetro76

2 years, 1 month ago

Question doesn't indicate whether or not the second utility tests are successful leaving two possible answers a,c

upvoted 2 times

Ariel235788

1 year, 1 month ago

I believe thats implied with 'Execute vulnerability' what happens when you execute someone

upvoted 1 times

...