A Penetration Tester Has Identified Several Newly Released CVEs on a VoIP

question 51

Multiple Choice

A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?

• A) Manually check the version number of the VoIP service against the CVE release
• B) Test with proof-of-concept code from an exploit database
• C) Review SIP traffic from an on-path position to look for indicators of compromise
• D) Utilize an nmap -sV scan against the service Utilize an nmap -sV scan against the service

---

Definitions:

Intellectual Functions

Cognitive capabilities related to reasoning, problem-solving, planning, abstract thinking, comprehension, and learning.

Cerebral Cortex

The outermost layer of the brain, involved in high-level functions such as sensation, voluntary muscle movement, thought, reasoning, and memory.

Basal Ganglia

A group of structures in the brain involved in coordinating movement, as well as aspects of cognition and emotion.

Voluntary Movements

Actions initiated and controlled by an individual's conscious mind, involving the mobilization of muscle groups to perform deliberate actions.