I85PREP
⌘ K
WBP SI study materials
WBP SI study resources

WBP SI practice questions

One question at a time. Build your WBP SI understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Security Inspection Fundamentals and Methodology

In aviation security screening, what is the primary purpose of the checkpoint screening process?

  1. To collect customs declarations for international flights
  2. To detect and prevent prohibited items from entering the sterile area Correct answer.
  3. To verify passenger frequent-flyer status
  4. To sell duty-free goods before boarding

Explanation

Checkpoint screening exists to prevent prohibited items, especially weapons and explosives, from reaching the aircraft or sterile area. It is a security control, not a commercial or immigration function.

Question 2Security Inspection Fundamentals and Methodology

Which screening technology is best suited to detecting organic materials such as explosives concealed on a person?

  1. Body scanner using millimeter-wave or backscatter technology Correct answer.
  2. Metal detector portal
  3. X-ray of checked hold baggage
  4. Hand-held metal detector wand

Explanation

Advanced imaging technology uses millimeter-wave or backscatter signals to reveal objects concealed under clothing, including non-metallic organic materials. Metal detectors respond only to metallic items, so they cannot reliably detect explosives.

Question 3Security Inspection Fundamentals and Methodology

What does the term 'sterile area' mean in airport security operations?

  1. The baggage make-up room
  2. The aircraft cargo hold
  3. An area where cleaning chemicals are stored
  4. The section of the terminal accessible only to screened passengers and staff Correct answer.

Explanation

The sterile area is the portion of the terminal beyond the screening checkpoint that only screened passengers and authorized staff may enter. Maintaining its integrity prevents unscreened persons from reaching aircraft.

Question 4Security Inspection Fundamentals and Methodology

A screener observes an X-ray image where an object appears orange. What does this color typically indicate?

  1. High-density metal
  2. Organic material of low density Correct answer.
  3. The object is outside the screening tunnel
  4. Glass or dense inorganic material

Explanation

In conventional color X-ray, orange generally represents organic materials such as food, plastic, or explosives. Metals appear blue or green depending on density, and intermediate-density inorganics appear green.

Question 5Security Inspection Fundamentals and Methodology

Which of the following best describes the concept of layered security in aviation?

  1. Combining multiple independent measures so a single failure does not compromise security Correct answer.
  2. Using only one very thorough screening method
  3. Replacing screening with passenger profiling
  4. Relying solely on intelligence gathering

Explanation

Layered security means several overlapping controls, such as intelligence, access control, screening, and patrols, each providing redundancy. If one layer fails, others still reduce risk.

Question 6Security Inspection Fundamentals and Methodology

What is the main function of a walk-through metal detector at a passenger checkpoint?

  1. To screen checked baggage for explosives
  2. To identify the chemical composition of liquids
  3. To image concealed organic materials
  4. To detect metallic weapons and other metallic prohibited items on a person Correct answer.

Explanation

Walk-through metal detectors detect metallic mass, such as firearms and knives, carried by a person. They do not image organic materials or analyze chemical composition.

Question 7Security Inspection Fundamentals and Methodology

Which item is generally classified as a prohibited item at the passenger security checkpoint?

  1. A paperback book
  2. A cotton scarf
  3. A sealed bottle of water
  4. A folding knife with a 10 cm blade Correct answer.

Explanation

Knives with blades above permitted limits are prohibited from the cabin because they can be used as weapons. Ordinary books, scarves, and liquids are subject to other rules but are not inherently prohibited weapons.

Question 8Security Inspection Fundamentals and Methodology

Why is access control to airside areas important in an airport security program?

  1. It speeds up retail sales in the terminal
  2. It reduces the cost of baggage handling
  3. It limits entry to authorized personnel and prevents unauthorized access to aircraft Correct answer.
  4. It replaces the need for passenger screening

Explanation

Access control ensures only authorized, badged persons enter airside and restricted areas, protecting aircraft and infrastructure from unauthorized interference. It complements rather than replaces passenger screening.

Question 9Security Inspection Fundamentals and Methodology

A screener at an X-ray station sees a dense, blue-black object shaped like a handgun in a carry-on bag. What is the appropriate immediate action?

  1. Ignore it because color alone is unreliable
  2. Allow the bag through and continue screening
  3. Stop the belt, isolate the bag, and follow the alarm resolution procedure Correct answer.
  4. Return the bag to the passenger without inspection

Explanation

A suspicious dense metallic shape resembling a weapon requires stopping the process, isolating the bag, and following the established alarm resolution procedure. This prevents the item from entering the sterile area.

Question 10Security Inspection Fundamentals and Methodology

During alarm resolution, a passenger triggers the metal detector. What is the standard first step?

  1. Immediately deny boarding
  2. Confiscate all the passenger's belongings
  3. Escort the passenger to the exit
  4. Direct the passenger to secondary screening such as a hand-held wand or pat-down Correct answer.

Explanation

The first step after a primary alarm is secondary screening to locate the source of the alarm. Options such as hand-held metal detection or a targeted pat-down resolve the alarm before any escalation.

Question 11Security Inspection Fundamentals and Methodology

What is the role of trace explosives detection equipment at a checkpoint?

  1. To scan passenger identity documents
  2. To detect minute explosive residues on surfaces, hands, or belongings Correct answer.
  3. To weigh carry-on baggage
  4. To identify the density of metals in a bag

Explanation

Trace detection equipment samples surfaces and analyzes them for explosive residue particles or vapor. It complements imaging by identifying chemical traces that may not be visible on X-ray.

Question 12Security Inspection Fundamentals and Methodology

A passenger presents a liquid container larger than the permitted volume. What is the correct screening response?

  1. Allow it through if the passenger is polite
  2. Ignore it because liquids are never a threat
  3. Apply the liquid restrictions and deny carriage or require disposal Correct answer.
  4. Confiscate the passenger's passport

Explanation

Liquid volume restrictions exist because liquid explosives are a recognized threat. The screener must apply the restriction and deny carriage or require disposal in line with policy.

Question 13Security Inspection Fundamentals and Methodology

Why must a screener be cautious about 'visual complacency' during long shifts?

  1. Because repetitive viewing can reduce attention and cause missed threats Correct answer.
  2. Because X-ray images become brighter over time
  3. Because the machine requires frequent restarts
  4. Because passengers become friendlier

Explanation

Visual complacency is the decline in vigilance from repetitive image viewing, which can cause a screener to miss subtle threats. Rotation, breaks, and active scanning techniques mitigate this risk.

Question 14Security Inspection Fundamentals and Methodology

What does 'random and unpredictable' mean as a screening principle?

  1. Screening the same passengers every time
  2. Only screening passengers who look nervous
  3. Screening only during peak hours
  4. Varying selection and methods so adversaries cannot predict or defeat controls Correct answer.

Explanation

Randomization prevents adversaries from planning around a fixed pattern. By varying selection and methods, security controls become harder to observe and defeat.

Question 15Security Inspection Fundamentals and Methodology

A screener notices a bag containing what appears to be a disassembled electronic device with wires and a battery. What is the best course of action?

  1. Remove the battery and return the bag
  2. Ask the passenger to reassemble it on the spot
  3. Pass the bag because it is disassembled
  4. Treat it as suspicious, isolate it, and escalate for specialist inspection Correct answer.

Explanation

Improvised explosive devices can appear as disassembled components with wiring and power sources. Such items warrant isolation and escalation to specialists rather than assumption of harmlessness.

Question 16Security Inspection Fundamentals and Methodology

Which statement best explains why screening personnel must document and report incidents?

  1. To increase the number of forms processed
  2. To provide reading material for staff
  3. To satisfy passengers' curiosity
  4. To create a record that supports investigation, trend analysis, and continuous improvement Correct answer.

Explanation

Incident reporting supports investigation, identifies trends, and drives improvements in procedures and training. Documentation is a feedback mechanism for the security system.

Question 17Security Inspection Fundamentals and Methodology

What is the purpose of calibrating and functionally testing screening equipment before use?

  1. To reduce electricity consumption
  2. To speed up passenger throughput regardless of accuracy
  3. To confirm the equipment performs to specification and detects known threats Correct answer.
  4. To increase the machine's resale value

Explanation

Functional testing with known test objects confirms that equipment meets detection specifications. Uncalibrated equipment may miss threats, so testing is a critical daily control.

Question 18Security Inspection Fundamentals and Methodology

A supervisor wants to reduce the risk of a screening lane being defeated by a coordinated diversion. Which measure best addresses this?

  1. Positioning staff to maintain oversight and prevent deliberate distractions Correct answer.
  2. Encouraging passengers to crowd the checkpoint
  3. Allowing only one screener per lane regardless of workload
  4. Removing the secondary screening position

Explanation

Coordinated diversion tactics rely on distracting screeners while a threat passes. Maintaining oversight and staffing positions to counter distraction preserves lane integrity.

Question 19Security Inspection Fundamentals and Methodology

What does the term 'resolution' mean in the context of image interpretation?

  1. Deleting the image after viewing
  2. Increasing the monitor's pixel count
  3. Determining the true nature of an object that appears ambiguous or suspicious Correct answer.
  4. Reporting the passenger to immigration

Explanation

Resolution is the process of determining what an ambiguous or suspicious object actually is, often by reorienting the bag or using other views. It ensures threats are identified before clearance.

Question 20Security Inspection Fundamentals and Methodology

Which practice best supports effective X-ray image interpretation?

  1. Relying only on the passenger's statement
  2. Rushing each bag to maximize throughput
  3. Viewing each bag from multiple angles and using image enhancement functions Correct answer.
  4. Ignoring the bag's declared contents

Explanation

Multiple views and enhancement functions reveal overlapping objects that a single view may conceal. Systematic use of these tools improves detection accuracy.

Question 21Security Inspection Fundamentals and Methodology

A screener identifies a prohibited item in a bag after the passenger has already entered the sterile area. What principle governs the response?

  1. The item may be ignored because screening is complete
  2. The screener should wait until the next shift to report it
  3. The passenger should be allowed to keep the item as a souvenir
  4. The item must be located and removed, and the sterile area integrity restored Correct answer.

Explanation

Sterile area integrity requires that prohibited items be located and removed once identified. Allowing a known prohibited item to remain compromises the security of the entire area.

Question 22Security Inspection Fundamentals and Methodology

An X-ray image shows an object with density and shape consistent with a firearm, but the passenger claims it is a toy. What is the correct analytical approach?

  1. Accept the claim and clear the bag
  2. Ask another passenger to confirm the claim
  3. Assume toys are never prohibited
  4. Treat the object as a potential firearm and resolve it through physical inspection Correct answer.

Explanation

Screener judgment must be based on objective image evidence, not unverified passenger claims. A firearm-like object is resolved through physical inspection to confirm its nature.

Question 23Security Inspection Fundamentals and Methodology

Which combination best reflects a risk-based approach to allocating screening resources?

  1. Directing more resources to higher-risk flights and passengers based on intelligence Correct answer.
  2. Screening only the largest aircraft
  3. Reducing screening during low-traffic periods
  4. Applying identical resources to every flight regardless of threat

Explanation

Risk-based allocation uses intelligence and threat assessment to focus resources where risk is highest. This improves security effectiveness compared with uniform or arbitrary allocation.

Question 24Security Inspection Fundamentals and Methodology

Why is a 'challenge' culture important in aviation security screening?

  1. It speeds up the screening queue
  2. It allows staff to ignore procedures they dislike
  3. It replaces the need for supervision
  4. It encourages staff to question anomalies and report concerns without fear Correct answer.

Explanation

A challenge culture empowers staff to raise concerns and question anomalies, catching errors before they become incidents. It supports, rather than replaces, supervision and procedure.

Question 25Security Inspection Fundamentals and Methodology

A new threat type emerges that current X-ray signatures do not reliably reveal. What is the most appropriate methodological response?

  1. Continue using only existing methods indefinitely
  2. Assume the threat is not real
  3. Update procedures, training, and detection methods, and share intelligence Correct answer.
  4. Rely on passenger self-declaration

Explanation

Emerging threats require adaptive methodology: updated procedures, training, detection capabilities, and intelligence sharing. Static methods leave a gap that adversaries can exploit.

Question 26Security Inspection Fundamentals and Methodology

In a layered airport security system, what is the primary purpose of the landside-to-airside boundary as a screening layer?

  1. To screen checked baggage for explosive devices before it is loaded
  2. To verify that only passengers holding a valid boarding document and authorized staff proceed beyond the checkpoint Correct answer.
  3. To inspect aircraft catering supplies for prohibited items
  4. To confirm that aircraft maintenance records are current

Explanation

The passenger checkpoint layer controls who and what moves from the landside (public) area into the airside (sterile) area. Its core function is to verify travel documents and authorization while screening persons and cabin baggage, so that unauthorized individuals and prohibited items do not reach the aircraft or restricted zones. Other layers, such as checked baggage screening or catering inspection, are separate controls.

Question 27Security Inspection Fundamentals and Methodology

A screener is assigned to a lane and must decide when to apply enhanced screening to a passenger. Which principle best describes how selection for enhanced screening should be carried out?

  1. Selection should be limited to the first passenger of each shift
  2. Selection should follow a published schedule so passengers know when to expect it
  3. Selection should be unpredictable and not based on any single fixed criterion Correct answer.
  4. Selection should always target the passengers who appear most nervous

Explanation

Unpredictability is a foundational screening principle: if selection follows a fixed pattern, adversaries can plan around it. Effective selection uses a mix of methods and criteria that cannot be reliably predicted or gamed from outside. Targeting only visibly nervous people or a fixed schedule creates exploitable patterns.

Question 28Security Inspection Fundamentals and Methodology

A screener is asked to interpret a conventional X-ray image and must judge whether an organic item is thick enough to conceal a threat. Which image characteristic should the screener evaluate for that judgment?

  1. The object's density as shown by the shading within the item Correct answer.
  2. The color of the item's outline only
  3. The number of items visible in the bag
  4. The brightness level of the monitor

Explanation

On a conventional X-ray image, the shading within an object indicates how much material the beam passed through, so density and thickness are read from the internal shading, not just the outline. A thick organic mass can hide a threat even when its color classification is organic. Screeners therefore assess both shape and internal density when judging concealment risk.

Question 29Security Inspection Fundamentals and Methodology

A screener finds that an X-ray machine's image quality has degraded over several shifts, with fine wires becoming hard to see. Which action best reflects sound screening methodology?

  1. Increase the belt speed so bags spend less time under the beam
  2. Continue screening and mentally compensate for the degraded image
  3. Remove the machine from service and have it tested and corrected before further screening Correct answer.
  4. Ask passengers to open their bags so visual inspection replaces X-ray

Explanation

Screening methodology requires that equipment perform to a verified standard before it is relied upon; degraded image quality means the control cannot reliably detect threats. The correct response is to take the machine out of service and have it functionally tested and corrected. Continuing to screen with a known deficiency, or substituting ad hoc visual inspection, leaves a gap in the security layer.

Question 30Security Inspection Fundamentals and Methodology

A screening operation must defend against an adversary who studies the checkpoint and adapts. Which methodological approach best addresses this adaptive threat over time?

  1. A policy of screening only the passengers who volunteer for additional checks
  2. A fixed procedure applied identically at every lane so staff perform consistently
  3. Periodic review of procedures and testing against evolving threat methods, with changes fed back into training Correct answer.
  4. A single high-technology sensor relied on as the primary control

Explanation

Because adversaries adapt, a screening methodology must itself adapt: procedures, equipment use, and training are reviewed and tested against current threat methods, and lessons are fed back into the operation. This continuous improvement cycle keeps the control effective against an adversary who probes for weaknesses. Rigid uniformity, single-point reliance, and voluntary screening all leave predictable gaps.

Question 31Asset Discovery and Inventory

In a Web Application Security assessment, an asset inventory is primarily maintained to achieve which outcome?

  1. Documenting the marketing names of public-facing websites
  2. Replacing the vulnerability management program with a single scan
  3. Guaranteeing that every discovered application has passed a penetration test
  4. Knowing which web applications, hosts, and components exist so they can be scoped, tested, and tracked over time Correct answer.

Explanation

The inventory is the authoritative record of what exists in scope: applications, hosts, endpoints and supporting components. It enables scoping, repeatable testing and change tracking; it does not by itself prove testing occurred or replace scanning.

Question 32Asset Discovery and Inventory

A tester needs the canonical list of hosts and URLs authorized for testing. Which inventory attribute set is most directly relevant?

  1. Scope status, hostnames, IP addresses, and URL paths Correct answer.
  2. Ownership team and cost center
  3. Brand color and login page screenshot
  4. Patch level and CVE count

Explanation

Scope decisions depend on the concrete technical identifiers: hostnames, IPs and URL paths plus an explicit in-scope marker. Ownership and patch data are useful context but do not define what may be tested.

Question 33Asset Discovery and Inventory

Which technique best extends an inventory beyond a seed domain by finding related hosts that share infrastructure?

  1. Enumerating certificate transparency logs and reverse DNS for the organization's netblocks Correct answer.
  2. Reviewing the source code repository's README
  3. Checking the HTTP response for a Server header
  4. Reading the application's privacy policy

Explanation

Certificate transparency logs expose hostnames in issued certificates, and reverse DNS over known netblocks reveals additional hosts. Both are standard discovery pivots that expand coverage beyond a single seed domain.

Question 34Asset Discovery and Inventory

During discovery you find a hostname that resolves to a shared content delivery network address. What is the correct inventory treatment?

  1. Record it as an owned origin server and scan the CDN address aggressively
  2. Record the hostname with a note that it fronts a third-party CDN and verify origin ownership before testing Correct answer.
  3. Delete it because CDN-fronted assets cannot be tested
  4. Exclude it permanently because CDN addresses are never in scope

Explanation

CDN-fronted hostnames are real assets, but the resolved address belongs to a third party. The inventory should capture the hostname and the CDN relationship, and testing must wait until origin ownership and authorization are confirmed.

Question 35Asset Discovery and Inventory

Which record in an asset inventory best supports detecting an unapproved new application appearing in production?

  1. A timestamped discovery baseline compared against current scan results Correct answer.
  2. A quarterly PDF report of tested applications
  3. A list of developer names per team
  4. A screenshot archive of login pages

Explanation

Change detection requires a known baseline and periodic re-discovery so differences surface as new or modified assets. Static reports and human-centric lists cannot reveal newly deployed applications.

Question 36Asset Discovery and Inventory

What distinguishes active discovery from passive discovery in web asset inventory work?

  1. Active discovery only uses spreadsheets; passive discovery uses scanners
  2. Active discovery sends traffic such as probes or requests to targets; passive discovery observes existing traffic or third-party data sources Correct answer.
  3. Active discovery finds only subdomains; passive discovery finds only IP addresses
  4. Active discovery is illegal; passive discovery is always authorized

Explanation

Active techniques interact directly with targets through requests, probes or scans. Passive techniques rely on observed traffic, DNS logs, certificate transparency and other external data without touching the target.

Question 37Asset Discovery and Inventory

An inventory entry lists an application but no owning team or business owner. Which risk does this gap create for the security program?

  1. The application will automatically be removed from DNS
  2. Certificate transparency will stop logging the hostname
  3. Findings cannot be routed for remediation and the asset may be abandoned without accountability Correct answer.
  4. The application cannot be assigned a URL

Explanation

Ownership is what turns an inventory record into an actionable asset: findings need a recipient who can fix them. Without an owner, remediation stalls and the asset drifts out of governance.

Question 38Asset Discovery and Inventory

You must attribute an unknown IP address to an organization. Which evidence provides the strongest direct attribution?

  1. A WHOIS record for the IP's allocation block names the organization Correct answer.
  2. A search engine indexes a page mentioning the IP
  3. The IP appears in a public paste site dump
  4. The IP responds on port 443

Explanation

Registration data for the address block is the most direct authoritative link between an IP and the organization that holds it. Leaked dumps, open ports and search hits are circumstantial and may involve third parties.

Question 39Asset Discovery and Inventory

Which practice keeps a web asset inventory accurate as applications are decommissioned?

  1. Retaining every historical record forever without status changes
  2. Deleting records as soon as a scan returns no response
  3. Relying on developers to email changes informally
  4. Applying a lifecycle status such as active, retired, or unknown with review dates Correct answer.

Explanation

A lifecycle status plus scheduled review lets the inventory reflect reality while preserving history. Silent deletion or informal updates loses traceability and reintroduces stale or missing entries.

Question 40Asset Discovery and Inventory

A scan of a wildcard DNS entry returns hundreds of random subdomains resolving to the same address. What is the most appropriate inventory action?

  1. Disable the wildcard record during testing
  2. Report the DNS server as vulnerable
  3. Add all of them as distinct applications because each resolves
  4. Treat the wildcard as a single infrastructure note and validate candidate subdomains before adding them Correct answer.

Explanation

Wildcard DNS causes any queried name to resolve, producing false positives. The inventory should record the wildcard behavior and only admit subdomains confirmed through other evidence such as content, certificates or application behavior.

Question 41Asset Discovery and Inventory

Which data source is most useful for discovering hostnames that were never linked from any web page?

  1. Certificate transparency logs Correct answer.
  2. The robots.txt disallow list
  3. The site's sitemap.xml
  4. HTML comment tags

Explanation

Certificate transparency logs record hostnames from issued certificates, including internal or unlinked names. Sitemaps, robots.txt and comments only reveal what the site itself references.

Question 42Asset Discovery and Inventory

What is the purpose of recording the technology stack, such as web server and framework versions, against each inventory asset?

  1. To satisfy DNS registration requirements
  2. To replace the need for authenticated testing
  3. To determine the application's marketing audience
  4. To prioritize testing and map known weaknesses to the components actually deployed Correct answer.

Explanation

Stack metadata links assets to relevant weakness classes and testing techniques, improving prioritization. It informs testing but does not remove the need for authenticated or manual assessment.

Question 43Asset Discovery and Inventory

An organization has three environments: production, staging, and development. How should the inventory represent them?

  1. Only record production because other environments are irrelevant
  2. Record only development because it changes most often
  3. Record each environment separately with its own URLs and scope status Correct answer.
  4. Merge them into one record per application to reduce clutter

Explanation

Environments differ in URLs, data sensitivity and authorization, so each needs its own record and scope status. Merging them obscures which targets are approved and which hold real data.

Question 44Asset Discovery and Inventory

Which indicator most reliably suggests that a discovered host is a decoy or honeypot rather than a production asset?

  1. It presents default credentials that grant access to obviously fabricated data Correct answer.
  2. It has a self-signed TLS certificate
  3. It responds slowly to HTTP requests
  4. It runs an outdated web server version

Explanation

Honeypots are designed to attract interaction, so easily obtained access to implausible or fabricated content is a strong signal. Outdated software, latency and self-signed certificates are common on legitimate systems.

Question 45Asset Discovery and Inventory

What does normalizing hostnames to lowercase and stripping trailing dots accomplish for an asset inventory?

  1. It converts hostnames into IP addresses
  2. It proves the hostname is in scope
  3. It prevents duplicate records for the same host expressed in different forms Correct answer.
  4. It encrypts the hostname values

Explanation

DNS names are case-insensitive and a trailing dot denotes the same fully qualified name. Normalization ensures these variants collapse to one record instead of creating duplicates.

Question 46Asset Discovery and Inventory

A tester discovers an API endpoint at /api/v2/internal that is undocumented and returns data without authentication. What is the correct inventory and reporting sequence?

  1. Record it as an asset, note the missing authentication, and report it through the vulnerability process Correct answer.
  2. Add it to the inventory only after the vendor fixes it
  3. Ignore it because it is undocumented
  4. Publish it on a public forum to confirm reachability

Explanation

Undocumented endpoints are still assets and must be recorded so they are tracked and retested. The missing authentication is a finding that follows the standard reporting path, not a reason to delay or publicize.

Question 47Asset Discovery and Inventory

Which approach best validates that an inventory of web assets is complete for a given organization?

  1. Cross-referencing inventory against independent sources such as DNS zone data, certificate logs, and load balancer configurations Correct answer.
  2. Comparing inventory counts against the number of developers employed
  3. Reviewing the inventory's last modification date
  4. Asking each team to confirm the inventory is complete

Explanation

Completeness is tested by reconciling the inventory against independent evidence of what exists. Self-attestation and metadata like modification dates cannot reveal assets that were never recorded.

Question 48Asset Discovery and Inventory

What is the main benefit of assigning a stable unique identifier to each inventory asset?

  1. It encrypts the asset's traffic
  2. It allows findings, tickets, and scan results to be correlated to the same asset over time Correct answer.
  3. It removes the need for ownership records
  4. It guarantees the asset will never change IP address

Explanation

A stable identifier lets disparate data, such as scan output, findings and tickets, join to one asset even as hostnames or addresses change. It does not affect the asset's network behavior or replace ownership.

Question 49Asset Discovery and Inventory

During discovery, an internal wiki lists an application at app.example.com, but DNS resolution fails and no certificate exists for the name. How should the inventory treat this candidate?

  1. Add it as an active asset with full scope
  2. Escalate it as a critical vulnerability
  3. Record it as a candidate with unverified status pending confirmation Correct answer.
  4. Discard the wiki reference entirely

Explanation

A single documentary reference without DNS or certificate corroboration is weak evidence. Marking it as an unverified candidate preserves the lead without polluting the active asset list, and it can be confirmed later.

Question 50Asset Discovery and Inventory

Which combination of inventory attributes best enables rapid scoping of a new penetration test?

  1. Historical CVE counts only
  2. Asset name, owner, environment, URLs, IPs, and authorization status Correct answer.
  3. Developer names and office locations
  4. Screenshot, brand logo, and marketing description

Explanation

Scoping needs technical identifiers plus ownership, environment and an explicit authorization state. These attributes determine what may be tested, who to contact, and how sensitive the target is.