Assessment

1. Which is not a vulnerability assessment type?
   1. Internal
   2. External
   3. Active
   4. Transitive
2. How many stages are there to the vulnerability assessment life cycle?
   1. 4
   2. 6
   3. 8
   4. 9
3. What is a single element from a vulnerability assessment report called?
   1. Element
   2. Tuple
   3. Finding
   4. Discovery
4. What is C2 short for?
   1. Command and Conquer
   2. Command and Control
   3. Capture and Control
   4. Capture and Commit
5. Which is not a threat modeling framework?
   1. PASTA
   2. STRIDE
   3. SKIBBLE
   4. VAST
6. Who are vulnerability scanners primarily used by?
   1. Blue teams
   2. Red teams
   3. Attackers
   4. A and B
7. When an attacker establishes a way to stay connected to the exploited system(s), what is this called?
   1. Encampment
   2. Obfuscated
   3. MitM
   4. Entrenchment
8. True or false? Attackers only compromise systems through vulnerabilities.
   1. True
   2. False
9. Which is not part of an attack tree?
   1. Prune
   2. Plant the seed
   3. Create subnodes
   4. Present the tree
10. True or false? Defenders can sometimes determine the type and motivation of an attacker based on their actions and behavior.
    1. True
    2. False

...