Kevin recently identified a new security vulnerability and computed its CVSS base score as 6.5. Which risk category would this vulnerability fall into?

Which one of the following is not an example of a vulnerability scanning tool?

Under the shared responsibility model, which component always remains the responsibility of the customer, regardless of the cloud service model used?

Cameron builds a malware signature using a hash of the binary that he found on an infected system. What problem is he likely to encounter with modern malware when he tries to match hashes with other infected systems?

Jessica is reading reports from vulnerability scans run by different parts of her organization using different products. She is responsible for assigning remediation resources and is having difficulty prioritizing issues from different sources. What SCAP component can help Jessica with this task?

Which one of the following activities is not part of the vulnerability management life cycle?

Alan is reviewing web server logs after an attack and finds many records that contain semicolons and apostrophes in queries from end users. What type of attack should he suspect?

Which one of the following is not a common source of information that may be correlated with vulnerability scan results?

Which one of the following operating systems should be avoided on production networks?

Which one of the following metrics is not included in the calculation of the CVSS exploitability score?