FirstTry

Objective 2.2

CS0-003

Given a scenario, analyze output from vulnerability assessment tools.

Objective 2.2 sits in Vulnerability Management, which carries 30% of the CySA+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-2Vulnerability Management

An analyst reviews a scan of a database server:

PORT     STATE    SERVICE1433/tcp filtered ms-sql-s

What does the filtered state tell them?

The port is open behind a proxyFiltered makes no claim of openness; the scanner could not tell.
The host is down entirelyA scan line for the port shows the host responded to discovery.
Filtering blocked probes to the portCorrect · your answerCorrect: filtering stopped the probes before the port could answer.
No application listens on the portNo-listener with reachability is the closed state, a different result.

Correct.

Checked against nmap.org, August 2026

Concept

A scan result reports what the scanner could observe, not the port's true state. When something in the path eats the probes, the scanner cannot distinguish protection from absence.

Why C

Filtered means packet filtering prevents probes from reaching the port, from a firewall device, router rules, or host firewall software, so openness cannot be determined.

Source

…filtered Nmap cannot determine whether the port is open because packet filtering prevents its probes from reaching the port. The filtering could be from a dedicated firewall device, router rules, or host-based firewall software.

Nmap reference guide, port scanning basics, checked August 2026
#nmap#scan-output#port-states

Now you: objective 2.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-2Vulnerability Management

A scan shows port 8080 as closed on a jump host. A teammate concludes the host is unreachable. Why is that wrong?

Sample question 2 of 3

2-2Vulnerability Management

A UDP scan reports many ports as open|filtered. Why can the scanner not be more specific?

Sample question 3 of 3

2-2Vulnerability Management

An engineer mapping firewall rulesets sees ports reported as unfiltered. Which scan type produces that state?

Full CySA+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Vulnerability Management