Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

A security technician needs to assess an internal enterprise server to accurately identify missing operating system patches and local software misconfigurations while minimizing network bandwidth usage. Which of the following scan methods should the technician execute?

  1. Credentialed vulnerability scanAnswer
  2. B
    Non-credentialed vulnerability scan
  3. C
    Intrusive penetration test
  4. D
    Dynamic Application Security Testing (DAST)

Answer

Credentialed vulnerability scan
A credentialed vulnerability scan authenticates directly to the target operating system, allowing the scanner to inspect internal file versions, package managers, and registry settings directly. This yields precise patch and configuration details without requiring heavy network packet generation.

Step-by-Step Solution

1
Determine host assessment requirements
The scenario requires auditing internal system configuration details and patch levels without causing server instability.
Reading internal system registries and software patch databases requires local system authorization.
2
Select the appropriate vulnerability scanning method
Executing a credentialed scan allows the scanner to log in locally to perform a direct inventory.
Credentialed scans provide host-level precision, significantly reduce false positives, and consume less network bandwidth compared to intense unauthenticated probing.

Key Concept

Credentialed vs. Non-Credentialed Vulnerability Assessment
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic