nerdexam
CompTIA

SY0-501 · Question #114

Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?

The correct answer is B. Vulnerability scan. A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are important for communication and data…

Submitted by mateo_ar· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?

Options

  • AProtocol analyzer
  • BVulnerability scan
  • CPenetration test
  • DPort scanner

How the community answered

(34 responses)
  • A
    9% (3)
  • B
    74% (25)
  • C
    3% (1)
  • D
    15% (5)

Explanation

A vulnerability scan is the automated process of proactively identifying security vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited and/or threatened. While public servers are important for communication and data transfer over the Internet, they open the door to potential security breaches by threat agents, such as malicious Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network's security. Vulnerability scanning typically refers to the scanning of systems that are connected to the Internet but can also refer to system audits on internal networks that are not connected to the Internet in order to assess the threat of rogue software or malicious employees in an enterprise.

Topics

#vulnerability scanning#passive assessment#security controls#threat verification

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice