VAPT-Quiz - ASD Academy

VAPT

Test your knowledge of Vulnerability Assessment and Penetration Testing with this interactive quiz. Explore concepts like risk assessment, threat analysis, exploit detection, and network security. Strengthen your skills in ethical hacking and cyber defense while learning best practices for system hardening and data protection.

fill the form !

1 / 20

What does VAPT stand for?

a) Verified Application Penetration Test

b) Vulnerability Analysis and Protection Test

c) Vulnerability Assessment and Penetration Testing

d) Vulnerability Audit and PenTest

2 / 20

Which of the following is a key goal of VAPT?

a) Data encryption

b) Finding and fixing security weaknesses

c) Writing secure code

d) Installing antivirus software

3 / 20

Which phase comes first in the VAPT process?

a) Exploitation

b) Reporting

c) Information Gathering

d) Post-Exploitation

4 / 20

Which tool is primarily used for vulnerability scanning?

a) Metasploit

b) Burp Suite

c) Nessus

d) Nmap

5 / 20

Which tool is mainly used for penetration testing and exploitation?

a) Wireshark

b) Metasploit

c) Nikto

d) Acunetix

6 / 20

Which of the following best defines penetration testing?

a) Scanning for open ports

b) Exploiting found vulnerabilities

c) Updating antivirus definitions

d) Running performance tests

7 / 20

Which type of testing simulates an external attack with no internal knowledge?

a) White-box Testing

b) Grey-box Testing

c) Black-box Testing

d) Internal Testing

8 / 20

What is the primary output of a VAPT assessment?

a) Firewall configuration

b) Security policy

c) Vulnerability report with risk ratings

d) Antivirus deployment

9 / 20

Which of the following is a web vulnerability scanner?

a) Wireshark

b) Acunetix

c) Hydra

d) John the Ripper

10 / 20

In which VAPT phase is privilege escalation tested?

a) Scanning

b) Exploitation

c) Post-Exploitation

d) Reporting

11 / 20

Which vulnerability allows attackers to inject malicious SQL statements?

a) XSS

b) CSRF

c) SQL Injection

d) Command Injection

12 / 20

Which type of test involves partial knowledge of the system?

a) White-box Testing

b) Black-box Testing

c) Grey-box Testing

d) Red-box Testing

13 / 20

Vulnerability Assessment is more focused on finding vulnerabilities than exploiting them.

True

False

14 / 20

All vulnerabilities discovered must be exploited during a VAPT.

True

False

15 / 20

Penetration testing always requires full knowledge of the system.

True

False

16 / 20

False negatives in a scan mean missing an actual vulnerability.

True

False

17 / 20

Nmap can be used for both port scanning and OS detection.

True

False

18 / 20

Reporting is not considered a phase of VAPT.

True

False

19 / 20

A VAPT assessment can help organizations meet compliance requirements like PCI-DSS.

True

False

20 / 20

Metasploit is mainly used for scanning networks.

True

False

Your score is

The average score is 0%

ASD Academy

Youtube Channels

Download Links