Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

A cybersecurity analyst must conduct a comprehensive vulnerability assessment on internal Linux servers hosting sensitive database services. The assessment requirements specify that the process must identify missing local software updates and misconfigured operating system kernel parameters while minimizing network bandwidth consumption and avoiding risk of service disruption caused by active network probing. Which of the following vulnerability assessment approaches best fulfills these operational requirements?

  1. Deploying host-based credentialed scanning agents on each serverAnswer
  2. B
    Performing an unauthenticated intrusive network vulnerability scan against server IP ranges
  3. C
    Configuring an inline web application firewall to inspect incoming network packets
  4. D
    Executing SQL injection attack payloads against database network ports

Answer

Deploying host-based credentialed scanning agents on each server best meets all stated requirements.
Deploying host-based credentialed scanning agents allows the vulnerability management system to audit internal software versions, local patch status, and OS kernel parameter configurations directly on the host. Because authentication and execution occur locally, this method consumes minimal network bandwidth and avoids sending network-probing packets that could destabilize sensitive production databases.

Step-by-Step Solution

1
Analyze the operational constraints and requirements in the scenario.
Identified requirements: detect local OS patch status and kernel misconfigurations, minimize network overhead, and prevent service disruption.
Vulnerability scanning techniques must be tailored to the specific sensitivity of the target infrastructure.
2
Evaluate host-based credentialed scanning agents against network-based scanning approaches.
Host-based agents run locally with system-level access, directly auditing patch management databases and local configuration files without transmitting high volumes of network probe packets.
Credentialed agent-based scanning provides deep internal visibility with minimal network impact and zero risk of network-induced service disruption.
3
Compare candidate options to select the single best methodology.
Host-based credentialed agent deployment is the only option that fulfills all assessment goals cleanly.
Alternative options either fail to inspect local host configurations or introduce network disruption risks and control misclassifications.

Key Concept

Credentialed vs. Unauthenticated and Host-Based vs. Network Vulnerability Scanning
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic