Exam SEC504 topic 1 question 5 discussion

Actual exam question from SANS's SEC504

Question #: 5
Topic #: 1

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You use Nessus as a vulnerability scanning program to fix the vulnerabilities. Which of the following vulnerabilities can be fixed using
Nessus?
Each correct answer represents a complete solution. Choose all that apply.

A. Misconfiguration (e.g. open mail relay, missing patches, etc.)
B. Vulnerabilities that allow a remote cracker to control sensitive data on a system
C. Vulnerabilities that allow a remote cracker to access sensitive data on a system
D. Vulnerabilities that help in Code injection attacks

Show Suggested Answer

Suggested Answer: ABC 🗳️

by cleavzz at Nov. 16, 2020, 8:22 p.m.

Comments

Submit Cancel

ExamCheat

7 months, 2 weeks ago

Nessus is also able to detect code injection vuln - https://www.tenable.com/plugins/was/families/Code%20Execution

upvoted 1 times

...

cleavzz

3 years, 1 month ago

The question is worded in a way where it states Nessus will resolve a vulnerability when Nessus is purely a network vulnerability scanner.

upvoted 3 times

saucehozz

1 year, 9 months ago

would you say it's [A - Misconfigurations] then?

upvoted 1 times

anonyuser

8 months ago

A B and C seem correct to me. The previous comment by cleavzz is correct though - the question implies Nessus is capable of fixing things. It's not really fixing anything, it just scans the system for issues that need to be fixed. It is just a poorly worded question. A is obvious. B and C make sense because vulnerabilities could be those that allow both control or access to sensitive data.

upvoted 1 times

...