Practical Security Automation and Testing

Questions

1. Which of the following is not used for known vulnerable components scanning?
   1. OpenVAS
   2. NMAP
   3. RetireJS
   4. SQLMap
2. Which of the following is not security guidelines for configurations?
   1. OpenSCAP
   2. STIG
   3. CVE
   4. CIS Benchmarks
3. If I'm looking for a specific product secure configuration, which of the following references are suggested?
   1. STIG
   2. OpenSCAP
   3. CIS Benchmarks
   4. NIST
4. What security assessment does NMAP do?
   1. Fast Scan for listening ports
   2. DOS attack with HTTPS Slowloris
   3. Scanning for all TCP listening ports
   4. All of above

5. Which of the following is a vulnerability database?
   1. CVE
   2. ExploitDB
   3. OSVDBE
   4. All of the above
6. Which of the following does SSLyze not do?
   1. Check for Heartbleed vulnerability
   2. Check for certificate validation
   3. Check for known ...