MENU
he MOST significant limitation of vulnerability scanning is the fact that modern scanners only detect:
Suggested Answer: D
Get Premium Cybersecurity-Audit-Certificate Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The MOST cost-effective technique for implementing network security for human resources (HR) desktops and internal laptop users in an organization is using avirtual local area network (VLAN). A VLAN is a logical grouping of network devices that share the same broadcast domain regardless of their physical location or connection. A VLAN can enhance network security by isolating different types of traffic or users from each other and applying different security policies or rules based on the VLAN membership. For example, an organization can create a VLAN for HR desktops and internal laptop users that restricts their access to only HR-related systems or resources. A VLAN can also reduce network costs by saving bandwidth, improving performance, and simplifying management.
37 comments · newest first
YO
Yoko
11 months ago
Common vulnerabilities are the main focus, though.
AM
Amina
11 months ago
I think they can detect some unknowns too, right?
DE
Dean
11 months ago
Wait, are you saying they can't catch zero-days?
GA
Gabriele
11 months ago
Totally agree, that's a big limitation!
AV
Avery
11 months ago
They only find known vulnerabilities.
PO
Portia
12 months ago
I'm a bit confused; I thought scanners could also detect some common vulnerabilities, but maybe that's not the main limitation?
TA
Taryn
12 months ago
I feel like the answer is C, known vulnerabilities, since that's what scanners are designed to detect most effectively.
FA
Fatima
12 months ago
I think I saw a practice question that mentioned zero-day vulnerabilities being a major concern, but I'm not sure if that's what this question is asking.
CH
Chana
1 year ago
I remember reading that scanners are really good at finding known vulnerabilities, but they struggle with the unknown ones.
AM
Amber
1 year ago
I feel pretty confident about this one. Vulnerability scanners are great for finding the low-hanging fruit, but they can't uncover the more advanced, unknown vulnerabilities that could be lurking in the system. I'm going to select option B.
MA
Maryrose
1 year ago
Hmm, I'm a bit confused on this one. I know vulnerability scanners have limitations, but I'm not sure if the most significant one is that they only detect known vulnerabilities. Let me think this through a bit more.
TO
Tonja
1 year ago
I'm pretty sure the answer is C - known vulnerabilities. Vulnerability scanners are designed to detect common, well-known vulnerabilities, but they can't find zero-day or unknown vulnerabilities.
PA
Paola
1 year ago
Okay, I think I've got it. The key here is that modern scanners are limited to detecting common, well-known vulnerabilities. They can't find the really tricky, zero-day vulnerabilities that hackers might be using. So I'm going to go with option D.
RO
Roslyn
1 year ago
Ah, I see what they're getting at. Confidential Transactions use cryptographic techniques to conceal the amounts, but they still have to prove the transaction is valid by showing the inputs and outputs match up. So the answer has to be True.
DE
Deane
1 year ago
This is a tricky one. I'm not super familiar with Splunk's syslog handling, so I'll need to review the material and think through the different approaches. Reliability is key, so I'll focus on understanding which options are most likely to ensure consistent data delivery.
KR
Kris
1 year ago
This question seems straightforward. I think segregating the application and database servers into different virtual networks is the way to go.
JE
Jesusita
1 year ago
Haha, imagine a vulnerability scanner that could detect 'unknown' vulnerabilities. That would be like a mind-reading cybersecurity tool. Sign me up for that one!
AZ
Azzie
1 year ago
D) zero-day vulnerabilities.
BR
Brett
1 year ago
C) known vulnerabilities.
BE
Ben
1 year ago
A) common vulnerabilities.
LA
Lawrence
1 year ago
I'm pretty sure the scanners can't detect zero-day vulnerabilities. That's the whole point of a zero-day - it's something no one knows about yet. Scanners are useful, but they're not psychic.
GE
Gene
1 year ago
C: Zero-day vulnerabilities are definitely out of their reach.
MI
Millie
1 year ago
B: I think they're limited to common vulnerabilities.
LA
Lavelle
1 year ago
A: Yeah, scanners can only detect known vulnerabilities.
SO
Soledad
1 year ago
C is the correct answer. Vulnerability scanners are great, but they're only as good as the database of known vulnerabilities they have access to. Anything new or unknown will slip through the cracks.
CO
Colene
1 year ago
Definitely. It's a constant battle to stay ahead of potential threats.
DE
Deandrea
1 year ago
I agree. It's scary to think about the unknown vulnerabilities that could be out there.
PA
Patti
1 year ago
That's true. It's important to keep updating the scanner's database to stay protected.
AN
An
1 year ago
C is the correct answer. Vulnerability scanners are great, but they're only as good as the database of known vulnerabilities they have access to.
KI
Kirby
2 years ago
I think the most significant limitation is that vulnerability scanners can only detect known vulnerabilities. There are always going to be unknown and zero-day vulnerabilities out there that they can't catch.
CI
Ciara
1 year ago
D) zero-day vulnerabilities.
IN
Ines
1 year ago
B) unknown vulnerabilities.
AN
Annice
1 year ago
C) known vulnerabilities.
SA
Samira
1 year ago
A) common vulnerabilities.
RO
Rory
2 years ago
But wouldn't detecting common vulnerabilities still be helpful in securing systems, even if it's not perfect?
LI
Lisandra
2 years ago
I agree with Truman, detecting only known vulnerabilities can leave systems vulnerable to zero-day exploits.
TR
Truman
2 years ago
I think the most significant limitation is that scanners only detect known vulnerabilities.