CompTIA CySA+ Practice Test

Which type of attack is a vulnerability scanner primarily used to detect?

1. Denial of Service

2. SQL Injection

3. Configuration errors

4. Phishing attempts

The correct answer is: Configuration errors

A vulnerability scanner is primarily designed to identify weaknesses in systems, applications, and network configurations. This includes checking for configuration errors, which can lead to security vulnerabilities if not addressed. Configuration errors might involve improper settings in software or hardware that could expose an organization to potential attacks. In contrast, the other types of attacks mentioned—Denial of Service, SQL Injection, and Phishing attempts—typically require different approaches for detection and prevention. Denial of Service attacks target availability, SQL Injection exploits vulnerabilities in application code, and Phishing relies on social engineering rather than technical vulnerabilities that a scanner would detect. Vulnerability scanners focus specifically on identifying misconfigurations and outdated software versions that leave networks open to exploitation by various types of attacks.