Eccouncil ECSAv10 Exam - Topic 8 Question 101 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 101
Topic #: 8

Vulnerability assessment is an examination of the ability of a system or application, including current security procedures and controls, to withstand assault. It recognizes, measures, and classifies security vulnerabilities in a computer system, network, and communication channels.

A vulnerability assessment is used to identify weaknesses that could be exploited and predict the effectiveness of additional security measures in protecting information resources from attack.

Which of the following vulnerability assessment technique is used to test the web server infrastructure for any misconfiguration and outdated content?

APassive Assessment

BHost-based Assessment

CExternal Assessment

DApplication Assessment

Show Suggested Answer

Suggested Answer: D

by Ben at Nov 24, 2025, 08:28 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Armando

2 months ago

I feel D) Application Assessment is the best choice. It covers misconfigurations well.

upvoted 0 times

...

Michell

2 months ago

True, but it doesn't specifically target web server issues like D).

upvoted 0 times

...

Mozelle

2 months ago

But isn't A) Passive Assessment more about monitoring?

upvoted 0 times

...

Sarah

2 months ago

I'm leaning towards C) External Assessment. It checks for outside vulnerabilities.

upvoted 0 times

...

Penney

2 months ago

I agree, D) Application Assessment makes sense for testing configurations.

upvoted 0 times

...

Yolande

3 months ago

Application assessment is definitely the way to go for web servers.

upvoted 0 times

...

Dahlia

3 months ago

Surprised that so many people overlook this step!

upvoted 0 times

...

Avery

3 months ago

I thought external assessments were more about outside threats?

upvoted 0 times

...

Arlen

4 months ago

Haha, I bet the exam writers had a field day coming up with these options. "Passive Assessment" - sounds like a yoga class, not a security test!

upvoted 0 times

...

Caprice

4 months ago

Hmm, I was thinking B) Host-based Assessment, but I guess that's more for checking the internal systems rather than the web server infrastructure.

upvoted 0 times

...

Valentin

4 months ago

C) External Assessment is the correct answer. It's the only option that specifically mentions testing the web server infrastructure.

upvoted 0 times

...

Tien

4 months ago

I feel like Passive Assessment is more about monitoring without interaction, so it probably isn't the answer here. I need to think this through more.

upvoted 0 times

...

Dolores

4 months ago

I practiced a similar question about assessing network vulnerabilities, and I think External Assessment could relate to web servers too, but I’m not confident.

upvoted 0 times

...

Pamella

4 months ago

I think the Application Assessment might be the right choice since it focuses on the software and its vulnerabilities, but I could be mixing it up with something else.

upvoted 0 times

...

Beula

5 months ago

I remember studying the different types of assessments, but I'm not entirely sure which one specifically targets web server misconfigurations.

upvoted 0 times

...

Frankie

5 months ago

I'm feeling pretty confident about this one. The question mentions testing for misconfigurations and outdated content, which sounds like an external assessment to me. That technique is all about evaluating the security of public-facing systems from the outside.

upvoted 0 times

...

Lettie

5 months ago

Okay, I think I've got this. The question is asking about a technique that tests the web server infrastructure, so that rules out passive assessment since that's more about monitoring. I'm leaning towards external assessment, since that's about testing from outside the network.

upvoted 0 times

...

Paola

5 months ago

Totally agree, it's crucial for security!

upvoted 0 times

...

Andra

5 months ago

I think it's D) Application Assessment. It focuses on web servers.

upvoted 0 times

...

Hubert

6 months ago

A vulnerability assessment checks for system weaknesses.

upvoted 0 times

...

Alpha

6 months ago

I agree, C) External Assessment seems like the most relevant technique for this scenario.

upvoted 0 times

...

Sherron

6 months ago

C) External Assessment for sure. Gotta keep those web servers in tip-top shape, am I right?

upvoted 0 times

...

Sarina

6 months ago

Hmm, I'm a bit confused about the differences between the assessment techniques. I'll need to review my notes on passive vs. external vs. application assessments to figure out which one is used to test web server infrastructure.

upvoted 0 times

...

Annalee

6 months ago

This seems like a pretty straightforward vulnerability assessment question. I'd start by reviewing the key points about the different assessment techniques and try to match them to the details provided in the question.

upvoted 0 times