Questions

1. Which of the following is not used for known vulnerable components scanning?
   1. OpenVAS
   2. NMAP
   3. RetireJS
   4. SQLMap
2. Which of the following is not security guidelines for configurations?
   1. OpenSCAP
   2. STIG
   3. CVE
   4. CIS Benchmarks
3. If I'm looking for a specific product secure configuration, which of the following references are suggested?
   1. STIG
   2. OpenSCAP
   3. CIS Benchmarks
   4. NIST
4. What security assessment does NMAP do?
   1. Fast Scan for listening ports
   2. DOS attack with HTTPS Slowloris
   3. Scanning for all TCP listening ports
   4. All of above

5. Which of the following is a vulnerability database?
   1. CVE
   2. ExploitDB
   3. OSVDBE
   4. All of the above
6. Which of the following does SSLyze not do?
   1. Check for Heartbleed vulnerability
   2. Check for certificate validation
   3. Check for known CVE
   4. Check compression for CRIME attack