Network Scanning and Vulnerability Detection

GOAA · 20 questions

• A city authorized assessment team plans work against the permitting VLAN under an approved ROE. Which activity should come before any exploitation discussion?
• A county purple team exports Nmap XML from an approved scan and asks an AI agent to summarize likely exposed municipal services for human analysts. What Domain 7 practice does this illustrate?
• A transit security engineer plans an internal drill on jumphosts and must choose a vulnerability-scanning approach. Which choice best fits an authenticated internal assessment?
• A water-utility assessment charter forbids scanning OT controllers. How should AI workflows that contextualize vulnerabilities be constrained?
• A school-district team runs vulnerability scanners to find missing patches, then asks AI to rank findings using internet exposure of student portals. What is the sound use of AI in that workflow?
• A housing-authority purple team notices an AI agent reported a CVE that does not appear in the raw scanner output. What should the team do first?
• A county fusion-center lab asks analysts to separate network enumeration from vulnerability detection. Which contrast is most accurate?
• A parks IT assessment wants scanner results joined to city asset-owner context so analysts see who owns each finding. Which approach best fits that goal?
• A municipal red team must scan networks that include systems supporting 911 computer-aided dispatch. What practice best operationalizes safe scanning?
• A city SOC wants an AI agent to help analysts see that many clerk-office findings share one underlying issue, such as outdated TLS. What task best matches that need?
• A county external scan finds exposed RDP on a temporary construction-trailer PC. How should an AI agent best support the investigation?
• A transit purple team compares approaches for a bus-yard lab assessment. Which statement correctly contrasts passive and active enumeration?
• A public-health assessment wants fewer false positives on clinic kiosk inventories. Which scanning choice best addresses that goal?
• A court network authorized test must keep evidence-locker subnets out of vulnerability scanners. What practice meets that requirement?
• A water IT lead reviews an AI agent wired to vulnerability scanner output. Which constraint correctly reflects typical municipal ROE?
• A city CISO dashboard shows scan-coverage gaps on several agency VLANs. What limitation should leaders remember about AI contextualization?
• A school SOC designs a pipeline that combines network scanning with an AI agent. Which sequence best reflects sound municipal operations?
• A housing-authority methodology write-up must distinguish discovery scanning from full vulnerability policy scans. Which distinction is correct?
• A municipal AI agent receives scanner JSON plus CMDB excerpts during an authorized assessment. What enrichment is most appropriate?
• A county after-action review finds an AI agent overstated severity by ignoring compensating firewalls documented beside the scan. What calibration lesson applies?