Vulnerability Scanning and Interpretation Questions

Understanding automated vulnerability scanning tools, how they operate, what they can and cannot detect, and how to interpret their results. This includes familiarity with common scanners such as Nessus, Qualys, and OpenVAS at a conceptual level, running and configuring scans, reading severity ratings and Common Vulnerability Scoring System values, identifying affected systems and components, and translating findings into remediation recommendations. Candidates should be able to explain false positives and false negatives, validation and verification strategies, basic manual techniques to confirm automated findings, vulnerability prioritization based on severity and exploitability, and the relationship between scanning and deeper security testing such as penetration testing.