FirstTry
Objective 2.2CS0-003

2.2 Given a scenario, analyze output from vulnerability assessment tools.

Objective 2.2 sits in Vulnerability Management, which carries 30% of the CySA+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-2Vulnerability ManagementModerate

An analyst reviews a scan of a database server:

PORT     STATE    SERVICE
1433/tcp filtered ms-sql-s

What does the filtered state tell them?

The port is open behind a proxyFiltered makes no claim of openness; the scanner could not tell.
The host is down entirelyA scan line for the port shows the host responded to discovery.
No application listens on the portNo-listener with reachability is the closed state, a different result.
Filtering blocked probes to the portCorrect · your answerCorrect: filtering stopped the probes before the port could answer.

Correct.

Concept

A scan result reports what the scanner could observe, not the port's true state. When something in the path eats the probes, the scanner cannot distinguish protection from absence.

Why D

Filtered means packet filtering prevents probes from reaching the port, from a firewall device, router rules, or host firewall software, so openness cannot be determined.

Source

#nmap#scan-output#port-states

Now you: objective 2.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-2Vulnerability ManagementModerate

A scan shows port 8080 as closed on a jump host. A teammate concludes the host is unreachable. Why is that wrong?

Sample question 2 of 3

2-2Vulnerability ManagementHard

A UDP scan reports many ports as open|filtered. Why can the scanner not be more specific?

Sample question 3 of 3

2-2Vulnerability ManagementModerate

An engineer mapping firewall rulesets sees ports reported as unfiltered. Which scan type produces that state?

Full CySA+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Vulnerability Management