LabYard_

Vulnerability Assessment

Answer all 15 questions, then submit. You need 75% to pass. If you don't pass, the reattempt unlocks after 24 hours.

Q1. SNMP enumeration can extract information about:

Hosts, routers, devices and shares Only web pages Only file extensions Only email accounts

Q2. What is network scanning?

A method of encrypting files A backup process A password policy A set of procedures for identifying hosts, ports, and services

Q3. Which vulnerability category is described as commonly caused by human error?

Load balancing Encryption Authentication Misconfiguration

Q4. The -A option in nmap enables:

OS detection, version detection, script scanning and traceroute Anonymous scanning Only port scanning Only ping scanning

Q5. The scanning phase checks:

Only physical security Only email messages Ports, hosts, OS versions and services Only employee records

Q6. Remediation means:

Collecting emails Creating a honeypot Scanning without fixing Applying fixes to vulnerable systems

Q7. NetBIOS enumeration can reveal:

Only DNS records Computers and shares Only email contents Only browser history

Q8. An ACK scan is chiefly used to:

Grab banners Detect the OS Map firewall rule sets by distinguishing filtered from unfiltered ports Find open ports

Q9. rpcclient is typically used to:

Query Windows RPC interfaces for users, groups and policy Sniff traffic Scan ports Crack NTLM hashes

Q10. Enumerating a MySQL server on port 3306 might reveal:

Version and whether remote root login without a password is allowed The web root The BIOS The TLS chain

Q11. Patch management should be driven primarily by:

File size Alphabetical order Exploitability and asset exposure Vendor release order

Q12. A Windows SID ending in -500 identifies:

A service account The built-in Administrator account A domain group The Guest account

Q13. Which scan uses no TCP flags in the module's list?

XMAS scan FIN scan Null scan ACK scan

Q14. An SMTP VRFY command can be abused to:

Confirm whether a mailbox name exists on the server Read stored mail Send spam Change the MX record

Q15. SNMP enumeration can expose device info via:

TLS certificates Default community strings like 'public' Cookies MAC addresses

LabYard · hands-on security & data training · flags look like ctflab{...}