Tenable Vulnerability Management Specialist Practice Test

These questions are part of the practice quiz. Start practicing

• After completing the lab exercise for this video, how many different agent groups is the Windows agent in?
• Which port scan setting is enabled by default to speed up the process?
• By default, NNM is installed in Full Mode.
• What should you do after discovering hosts?
• Nessus Agents are particularly advantageous for which scenario?
• What is the purpose of the chapters in a report?
• What action best describes how to modify the dataset filter on an existing widget?
• When would there be problems using Auto Select in a scan?
• Which of the following is NOT a function of the integrations available with Tenable Vulnerability Management?
• What does the Description field in an audit item equate to?
• Which statement is true about plugin organization in Tenable Core?
• Which of the following lists all sensors that can be installed with Tenable Core?
• Which header is used to name the audit in a .audit file?
• Which statement best describes the Service Discovery setting in a network scan?
• What is the best tool for overall asset analysis in Tenable Vulnerability Management?
• Where can you find all Tenable compliance audits and policies related to a specific benchmark?
• Which statement best describes the sensor configurations supported by Tenable Core?
• What is the primary function of dashboards in Tenable Vulnerability Management?
• Plugins are organized by which of the following?
• Which of the following is a direct benefit of using Nessus Agents?
• The statement that the Licensed filter being Yes restricts asset visibility to assets with vulnerability assessments is...
• Which approach should be used to manage which agents are scanned in Tenable Vulnerability Management?
• Which capability is true about Nessus Agents?
• Which statement best describes the purpose of a compliance assessment?
• From where do agent credentials used in a credentialed agent scan come?
• How many assets returned OS Identification?
• Why might someone disable Safe Checks during a scan?
• Which page is central for asset tagging and analysis?
• Which factor should be considered when verifying a Tenable Core deployment's readiness?
• How do Nessus Agents report their findings?
• On which platforms can Nessus be installed?
• What does the 'Advanced Filter Control' in Tenable Vulnerability Management allow you to do?
• If the plugin is locked, then plugins in that plugin family added after the scan policy was created are not used when performing future assessment. What happens when a plugin update adds a new plugin to that family?
• Which feature allows a scanner to activate devices that are not always on?
• In Tenable Vulnerability Management, tags are used to group assets for permissions, analysis, and management. Which statement best supports this usage?
• Which statement describes NNM's operational modes?
• What does the Cumulative Findings page primarily display?
• How can backups in Tenable Core be managed?
• What is the primary function of Tenable Nessus Network Monitor (NNM)?
• What is the purpose of the 'Fragile Devices' setting in an Advanced Network Scan?
• Which sensors can be installed using Tenable Core?
• Which statement correctly describes CVSS's limitation in the context of threat landscape changes?
• In filtering, which field commonly contains multiple values and benefits from wildcard matching?
• What is the primary purpose of creating networks in Tenable Vulnerability Management?
• Which of the following is NOT a benefit of using Nessus Agents?
• Which scan template is recommended for compliance scans in Tenable Vulnerability Management?
• Which scan template is recommended for credentialed vulnerability assessment?
• What are the primary modes of operation for NNM?
• Which statement correctly describes Nessus Agent behavior in relation to the management platform?
• What port does an Agent use to connect to Tenable Vulnerability Management?
• Operating System (OS) identification using a Host Discovery scan is always completely reliable.
• How can compliance audit results be viewed?
• What should you consider when troubleshooting Tenable Core deployment issues?
• When launching the remediation scan in the lab, you were instructed to add credentials.
• What is a benefit of using Tenable Nessus Agents for vulnerability assessment?
• In an OS Discovery scan, how many assets returned OS Identification?
• Which of the following is true about the relationship between discovery options in Basic and Advanced Network Scans?
• Which method is used for Operating System (OS) identification in a Host Discovery scan?
• What significant limitation does CVSS have?
• What is the primary purpose of creating networks in Tenable Vulnerability Management?
• What is the primary reason host discovery is considered a crucial first step in vulnerability management programs?
• How are Tenable plugins organized?
• What field in the plugin details would show you whether the plugin requires credentials?
• What is the purpose of credentialed vulnerability scans?
• If the Licensed filter is set to Yes, you will only see assets upon which a vulnerability assessment has been run.
• What is the purpose of customizing a Host Discovery scan?
• Which statement about SSL certificates in NNM is correct?
• Which statement best describes the effect of credentialed scans on finding vulnerabilities?
• Which statement best describes how Nessus Agents affect network bandwidth in locations with limited connectivity?
• What is Tenable University best known for?
• Using a web browser, on what port should you connect to your Nessus installation to begin configuration?
• Which deployment option is supported for Tenable Core?
• In Tenable Vulnerability Management, plugins can be individually selected and edited in all scan templates.
• Which statement about the 'Can Edit' permission is true?
• Which statement is true about the basic Host Discovery scan content?
• When applying a filter in a report, which parts of the report are updated?
• Using a web browser, which method and port provide access to the Tenable Core management interface?
• What are object user permissions in Tenable Vulnerability Management?
• In Tenable Vulnerability Management, cloud connectors scope?
• Which option describes the purpose of the Discovery Mode in Nessus Network Monitor?
• What does the 'Age out' option do when creating a network in Tenable Vulnerability Management?
• In the deployment workflow for Nessus Agents, which item must be obtained before linking the agent to Tenable Vulnerability Management?
• Where can dashboard exports be downloaded from within Tenable Vulnerability Management?
• Using a web browser, on what port should you connect to your Nessus installation to begin configuration?
• Which channel provides short how-to videos covering specific features for all Tenable products?
• What privilege escalation method is used when you create SSH credentials for a scan?
• What is the first step in the deployment process for Tenable Nessus Agents?
• What is the default state of the Safe Checks option?
• Which scan template is best practice for credentialed vulnerability assessment?
• True or False: Tenable Core is designed for automatically patching vulnerabilities.
• Which of the following statements is true regarding Nessus Agent deployment and linking?
• What is the primary function of a plugin in an Advanced Network Scan?
• All audits can be downloaded from the Tenable online Audits database.
• What is typically the result of enabling Override Scan Accuracy in a vulnerability scan?
• The Exclusion Range must be set when configuring Nessus Network Monitor.
• Which of the following best describes the scope of Tenable Professional Services offerings?
• What is the default port used to connect to Tenable Nessus Network Monitor (NNM) after installation?
• Which types of files are supported for content auditing in Tenable Vulnerability Management?
• What is the recommended approach when adding new users in Tenable Vulnerability Management?
• What must you do to install and configure a Tenable Nessus Agent?
• Disabling Safe Checks may increase risk by allowing what during a scan?
• What is NOT a step in creating a network in Tenable Vulnerability Management?
• Which of the following statements best describes the relationship between roles, permissions, and users?
• How do Nessus Agents securely communicate cyber exposure data to Tenable Vulnerability Management?
• What do the Basic Network Scan and Advanced Network Scan discovery options have in common?
• Which do not perform network checks during scans?
• You can tag assets directly on the Cumulative Assets page.
• What is the effect of adding credentials to a vulnerability scan?
• Which statement about agent grouping permissions is true?
• What speed impact does adding credentials have during a Fast Vulnerability Assessment when credentials succeed?
• Which operating systems are supported by Tenable Vulnerability Management for compliance assessment?
• When are scanner groups particularly beneficial?
• How can a user customize a dashboard in Tenable Vulnerability Management?
• Which statement about Access Control in TVM is true?
• What is the recommended method to manage and configure Tenable Core after installation?
• Which of the following can be customized in a Host Discovery scan to adapt to network conditions?
• Where are Grid page export schedules managed?
• What is the correct port for secure management access?
• If you want asset discovery data only, which configuration should you use?
• On which page can you see both specific scan results and cumulative findings?
• What makes Nessus Agents particularly useful in remote locations?
• Which of the following statements is true about the relationship between roles and object permissions?
• In Tenable Vulnerability Management, scanner groups are primarily used to what?
• Compared to a non-credentialed scan, what difference is observed in a credentialed scan's results?
• If a new plugin is added to an enabled family after the scan policy is created, and the plugin is not locked, will it be used in future assessments?
• When you created Regions:HQ tag in the lab, what filter was still set, other than IPv4 Address?
• What is the visibility behavior of new agent groups to users by default?
• What is used to connect a Nessus Agent to Tenable Vulnerability Management?
• Which scan template is suitable for credentialed patch auditing?
• If thorough tests are not used, which SMB share scanning level is performed?
• What are the minimum required components of a report?
• Why is it recommended to include the Tenable Nessus Agent on your golden image?
• Which feature enables automatic selection of a scanner during scans?
• Which statement about Grid page export formats is true?
• In addition to an audit file, what is required for a network compliance scan?
• In a .audit file, which header defines the specific benchmark checks?
• Which statement about networks in NAT environments is true?
• What is the primary function of tags in Tenable Vulnerability Management?
• What is the purpose of cloud connectors in Tenable Vulnerability Management?
• Operating System (OS) identification using a Host Discovery scan is always 100% reliable.
• Where is the best place to find detailed information about a specific plugin or plugin family?
• Which combination of sensors includes Web Application Scanning?
• What must be confirmed in order to troubleshoot Nessus Network Monitor (NNM) connectivity issues?
• How does the role assigned to a user impact object user permissions?
• Which component is NOT part of defining a scanner group?
• What is the primary goal of Access Control within Tenable Vulnerability Management?
• What file formats are supported for Grid page exports?
• In the context of OS Identification, what is the plugin ID for OS Identification?
• How do the Service Discovery settings assist in network scanning?
• Which of the following is an example of an object in Tenable Vulnerability Management?
• What services does Tenable Professional Services offer?
• Which network arrangements are essential for configuring NNM for optimal performance?
• For what purpose does Nessus Network Monitor (NNM) support custom Secure Sockets Layer (SSL) certificates?
• Where can additional reporting options be enabled in scan templates?
• What is the main advantage of using the default Host Discovery scan template?
• What is the impact of scanning all 65,535 ports on network performance?
• Which statement best describes Nessus Agent behavior during vulnerability scanning?
• You can disable Safe Checks in the Host Discovery Scan template.
• Which statement about dashboards' scheduled exports is true?
• How are permissions related to tags in Tenable Vulnerability Management?
• If a new user’s access is not yet defined, which approach best follows least-privilege onboarding?
• Which sensors can be deployed with Tenable Core?
• What is the best way to do a side-by-side comparison of different asset groups for the same filter set on a dashboard?
• What is the first step in creating a custom dashboard in Tenable Vulnerability Management?
• When creating a network, which action is explicitly described as not being a step?
• If you enable the Test Default Oracle Credentials option in a scan, what is the expected impact?
• Which statement best describes how agent scans perform a credentialed assessment?
• Where can you view assets discovered by a connector in Tenable Vulnerability Management?
• Which port or protocol is used by Nessus Agents to securely transmit cyber exposure data to Tenable Vulnerability Management?
• An individual Agent can be in multiple Groups.
• Which statement best describes NNM's Host Discovery mode?
• What is the purpose of the Safe Checks option in an Advanced Network Scan?
• What is the purpose of analyzing Common Vulnerability Scoring System (CVSS) scoring within Tenable Vulnerability Management?
• What is included in even the most basic Host Discovery scan?
• When adding a custom widget, what data set focus options are available?
• What is the initial step in a vulnerability assessment scan of an asset?
• During a Fast Vulnerability Assessment, when credentials succeed, which scanning component tends to be faster?
• After discovering hosts, what is the recommended next step?
• When troubleshooting connectivity issues for Nessus Agents, which checks should you perform?
• In a mixed OS environment, which hosts will be audited?
• In a Fast Vulnerability Assessment, when credentials succeed, which scanning method tends to be faster?
• In the custom audit in lab for this video, what was the required minimum password length? (Hint: Look for the value_data field in the audit file, or the policy value in the plugin output).
• In Tenable, how does the role assigned to a user impact object permissions?
• What role within Tenable Vulnerability Management has the capability to perform all functions?
• What is the first header tag seen in a .audit file, and what does it indicate?
• Which port is used for secure HTTPS connections to Tenable Vulnerability Management?
• Why is it important to secure your Nessus installation with an SSL certificate?
• Vulnerability assessments can be performed with agents only, and compliance assessments cannot be performed.
• What is Tenable Core primarily designed for?
• What is the primary reason for organizing Nessus Agents into groups?
• You can create custom widgets for custom reports.
• How are agents managed in Tenable Vulnerability Management for scans?
• For which operating systems (OS) are agent compliance audits supported?
• Where are reusable widgets stored for cross-dashboard use?
• Agent compliance audits are supported on which systems?
• An Agent scan returns the same compliance results as a network scan.
• Which feature is offered only in reports, not in dashboards?
• How should agents be grouped for effective management?
• Which statement about Nessus Agents is true regarding network scanning overhead?
• How can you manage scheduled exports for Grid pages?
• What does the 'can use' permission typically allow for a scanner or scanner group?
• What is an important consideration when setting up access control components for a new user?
• What type of information is primarily gathered by a Host Discovery scan template?
• Which statement correctly describes the plugin name shown in audit results when analyzing an audit item?
• Which statement about Nessus platform support is correct?
• Which search method will get the best filter results when searching for a value in the CVSS v3 Vector field in Tenable Vulnerability Management?
• Where in Tenable Vulnerability Management can you create a scanner group?
• What authentication method is recommended for remote backups in Tenable Core?
• Where can dashboard exports be downloaded from within Tenable Vulnerability Management?
• Which action does a 'Can use' permission associated with a tag allow?
• Which statement about object permissions is true?
• In the context of a Windows audit, what functionality does inserting conditions provide?
• Which method best describes OS Identification in Host Discovery?
• What is true about credential checks in an agent scan in terms of scope?
• What web-based interface capabilities does Tenable Core offer?
• Which combination of sensors is supported by Tenable Core?
• Why should discovery scans be run regularly within an organization?
• In an agent-based assessment, is a centralized scanner necessary to perform the assessment?
• Which is essential for capturing traffic from a network segment using NNM?
• Which credential types are supported in Tenable Vulnerability Management?
• Which activation code should be used during Nessus Network Monitor (NNM) registration for connecting with Tenable Cloud services?
• Which scan template is recommended for compliance scans in Tenable Vulnerability Management?
• What type of elements do dashboards primarily consist of for data presentation?
• In a report template, what does clicking Edit Filter accomplish?
• Which statement best describes the handling of plugin updates after a scan policy is created?
• What types of pings can be enabled and/or disabled in a Host Discovery scan?
• True or False: The minimum components of a report include an index page, headers and footers, page numbers, and a bibliography.
• What happens when you select 'All' for port scanning?
• Which permission is generally reserved only for administrators?
• Why is it considered best practice to assign permissions and objects at the group level in Access Control?
• What type of content can be found on the Tenable Product Education YouTube channel?
• When you duplicate a widget and modify its tag, what is the result?
• Which of the following is NOT a listed benefit of using Nessus Agents?
• Which statement best describes Tenable University?
• Which statement about license filtering is true?
• Which label describes how plugins are grouped in Tenable Core's taxonomy?
• In Tenable VM, which statement best describes how CVSS scores are used when prioritizing vulnerabilities?
• What is the impact of enabling the 'Override Scan Accuracy' setting?
• Under Brute Force Test Options, which is allowed when enabled?
• In the Windows audit file, which header implies that Custom Items can be interchangeable with Items depending on the check type?
• Which feature should you use to construct complex search queries with nested conditions?
• In the lab exercise, were credentialed checks run for the agent scan?
• In a mixed OS environment, selecting an OS-specific audit will result in which hosts being included?
• What is the primary function of Tenable Nessus Network Monitor (NNM)?
• Which outcome is achieved by grouping Nessus Agents in terms of assessment delivery?
• Enabling brute force test options restricts the scan to using which credentials?
• Content auditing supports which file categories?
• What do you need to obtain from Tenable Vulnerability Management in order to connect Nessus as a linked scanner?
• In Tenable Core, which category groups related plugins?
• What do 'Warnings' in the audit results indicate?
• What is a notable advantage of using Nessus Agents for vulnerability assessment?
• What type of file is used for Tenable Vulnerability Management compliance scans?
• Which operating systems are supported for compliance assessment?
• Which statement best describes the role of a Regions tag in asset filtering?
• How do you perform operating system updates in Tenable Core?
• What is the default permission setting for a new agent group?
• Which statement best describes the automated update mechanism in Tenable Core?
• Why might some vulnerabilities with high Vulnerability Priority Rating (VPR) scores have lower severities?
• How does the 'Access All Assets' default permission impact individual permissions set for users or user groups?
• Which factor is NOT considered part of the Vulnerability Priority Rating (VPR) score?
• Which page(s) can tag-based filters be applied to via Can Use permissions?
• What is the key distinction between Roles and Permissions within Tenable Vulnerability Management?
• Which filter would you use to identify assets that have not been actively scanned in an AWS environment?
• What conditions must be met for malware assessment to work correctly?
• What resource can help quickly apply a predefined layout to a dashboard?
• What is the primary purpose of a compliance assessment in Tenable Vulnerability Management?
• Which scan policy is normally used for a Basic Host Discovery scan?
• How can dashboards be shared in Tenable Vulnerability Management?
• Which Agent Scan template is optimized for finding most non-network related vulnerabilities?
• What is the recommended best practice when running scans related to firewalls?
• How can you manage scheduled exports for dashboards?
• Which port is used by the Agent to connect to Tenable Vulnerability Management?
• Which statement about connectivity troubleshooting is true?
• In Tenable Vulnerability Management, which file type is used to define compliance scans?
• What is the maximum network speed NNM can monitor in its standard configuration?
• Which field indicates the minimum password length in a custom Windows audit?
• What effect does 'Perform thorough tests' have on scanning?
• How do you manage and configure Tenable Core after installation?
• Which scheduling approach is recommended when uncertain about agent online times?
• What is the typical network impact of a default Host Discovery scan template?
• What does the absence of an Audits tab in a scan result suggest?
• What command is used to start the Nessus Agent service on an Oracle Linux host?
• What is required for all types of compliance scans?
• Which statement best describes the relationship between CVSS and Vulnerability Priority Rating (VPR) in Tenable VM?
• What is a suggested limit for the number of agents in a group, in order to manage data effectively?
• Which port is used by NNM for its web interface after installation?
• Which statement is true regarding the use of networks in Tenable Vulnerability Management?
• Which pair are the primary modes of operation for NNM?
• Can you filter on report widgets individually?
• Severity in Tenable Vulnerability Management is based on:
• How can you filter dashboards in Tenable Vulnerability Management?
• Where can Tenable users find comprehensive documentation on all products?
• Why does Tenable recommend running analysis and reporting from the Cumulative Findings page?
• Which of the following is NOT a core component of Access Control in Tenable Vulnerability Management?
• When you add a new Agent Group, what is the default permission for All Users for that agent group?
• What is the best scanner to select for an Agent Scan?
• Which statement about custom widgets is true?