CAS-002 · Question #363
Which of the following is the best description of vulnerability assessment?
The correct answer is C. Determining the weaknesses in your network that would allow a threat to be exploited. Weaknesses in your network due to inherent technology weaknesses, mis-configuration, or lapses in security are vulnerabilities. Answer option A is incorrect. Determining the threats to your network is threat assessment not vulnerability assessment. In fact this phase is done…
Question
Which of the following is the best description of vulnerability assessment?
Options
- ADetermining what threats exist to your network.
- BDetermining the impact to your network if a threat is exploited.
- CDetermining the weaknesses in your network that would allow a threat to be exploited
- DDetermining the likelihood of a given threat being exploited.
How the community answered
(32 responses)- B3% (1)
- C91% (29)
- D6% (2)
Explanation
Weaknesses in your network due to inherent technology weaknesses, mis-configuration, or lapses in security are vulnerabilities. Answer option A is incorrect. Determining the threats to your network is threat assessment not vulnerability assessment. In fact this phase is done before vulnerability assessment Answer option D is incorrect. Determining the likelihood of a given attack is likelihood assessment. This would be done after vulnerability assessment. Answer option B is incorrect. Impact analysis is certainly important, but this is done after vulnerability assessment.
Topics
Community Discussion
No community discussion yet for this question.