Security and Risk Management

Correct Answer: To identify weaknesses in a system

The purpose of a vulnerability scan is to identify weaknesses in a system. Mitigating or patching vulnerabilities is a subsequent step to address identified weaknesses. Preventing all attacks from occurring is impossible, as there will always be some form of vulnerability, no matter how small. Removing all malware from a system is a different process – an antivirus software or malware scan would be more appropriate for that purpose. Monitoring network traffic and preventing system downtime are also important security practices, but they are not the main purpose of a vulnerability scan.

Correct Answer: Pseudonymity

Cryptography has five main principles: confidentiality, integrity, authentication, non-repudiation, and availability. Pseudonymity is not one of them.

Correct Answer: It contains both upper and lower case letters, numbers, and special characters

A strong password should contain a mix of upper and lowercase letters, numbers, and special characters. It should not be easy to guess, easy to remember, or a commonly used word or phrase. It is also important to use a different password for each account, to prevent a cyber attacker from gaining access to all accounts if they are able to crack one password.