During a Review of Vulnerability Scan Results, an Analyst Determines

question 28

Multiple Choice

During a review of vulnerability scan results, an analyst determines the results may be flawed because a control-baseline system, which is used to evaluate a scanning tool's effectiveness, was reported as not vulnerable. Consequently, the analyst verifies the scope of the scan included the control-baseline host, which was available on the network during the scan. The use of a control-baseline endpoint in this scenario assists the analyst in confirming:

• A) verification of mitigation.
• B) false positives.
• C) false negatives.
• D) the criticality index.
• E) hardening validation.

---

Definitions:

Sign Test

A non-parametric test used to determine if there is a median difference between two related samples.

Attitude Test

An assessment designed to determine a person's feelings or opinions about various subjects.

Motion Picture

Another term for a movie or film, a sequence of images displayed rapidly to create the illusion of motion.

Test Statistic

A value calculated from sample data that is used in a hypothesis test to determine whether to reject the null hypothesis.