Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA SY0-701 Exam - Topic 5 Question 55 Discussion

Which of the following is an example of a false negative vulnerability detection in a scan report?
C) A result that shows no known vulnerability
A) A vulnerability that does not actually exist
B) A vulnerability that has already been remediated
D) A zero-day vulnerability with a known remediation

CompTIA SY0-701 Exam - Topic 5 Question 55 Discussion

Actual exam question for CompTIA's SY0-701 exam
Question #: 55
Topic #: 5
[All SY0-701 Questions]

Which of the following is an example of a false negative vulnerability detection in a scan report?

Show Suggested Answer Hide Answer
Suggested Answer: C

A false negative occurs when a security control or scanning tool fails to detect a vulnerability that actually exists. In vulnerability scanning, this means the scan reports a system as secure even though it is vulnerable. Therefore, a result that shows no known vulnerability is an example of a false negative if a vulnerability is present but undetected.

CompTIA Security+ SY0-701 explains that false negatives are particularly dangerous because they provide a false sense of security, potentially leaving systems exposed to exploitation. Causes of false negatives include outdated vulnerability signatures, misconfigured scanners, credentialed scan failures, or unsupported legacy systems.

Option A describes a false positive, where a vulnerability is reported but does not exist. Option B may indicate an outdated scan result, not necessarily a false negative. Option D is incorrect because zero-day vulnerabilities do not have known remediations and are typically not detected by signature-based scanners.

Thus, the correct example of a false negative is C: A result that shows no known vulnerability.


Contribute your Thoughts:

0/2000 characters
Shalon
3 hours ago
I feel like D is tricky because it mentions a zero-day, but if it has a known fix, wouldn’t that mean it’s not a false negative?
upvoted 0 times
...
Melissa
5 days ago
I’m a bit confused. Isn’t C just saying there’s no vulnerability at all? That doesn’t seem like a false negative to me.
upvoted 0 times
...
Alfred
10 days ago
I remember practicing with similar questions, and I think B could also fit since it’s about something that was there but isn’t anymore.
upvoted 0 times
...
Kristine
16 days ago
I think a false negative means the scan misses something that’s actually there, so maybe A? But I’m not entirely sure.
upvoted 0 times
...

Save Cancel