Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

A security analyst is preparing to perform a vulnerability assessment on an isolated network segment containing legacy Point-of-Sale (POS) devices. During a prior assessment, aggressive network probes caused service outages on several legacy terminals. The analyst must obtain an accurate vulnerability report for audit compliance while preventing system instability. Which of the following scanning approaches should the analyst implement?

  1. Configure an authenticated non-intrusive scan with reduced packet concurrency and rate-limiting.Answer
  2. B
    Execute an unauthenticated intrusive penetration scan to test system resilience under exploit traffic.
  3. C
    Deploy an inline intrusion prevention system to filter out high-severity scanner payloads before they reach the endpoints.
  4. D
    Configure cross-site scripting filter rules on the perimeter firewall to sanitize scanning traffic targeting the POS network.

Answer

Configure an authenticated non-intrusive scan with reduced packet concurrency and rate-limiting.
Authenticated (credentialed) non-intrusive scanning uses valid system credentials to query operating system attributes, patch levels, and installed software internally. Because it reads system state directly rather than firing aggressive network exploit probes, it delivers high accuracy with minimal risk of crashing sensitive legacy host services.

Step-by-Step Solution

1
Identify system constraints and risk tolerance.
Legacy POS devices are sensitive to high packet volumes and active exploitation attempts, causing crashes.
Scanning requirements must balance accuracy with operational availability.
2
Select the appropriate scanning technique.
Authenticated (credentialed) non-intrusive scanning inspects local configuration registries and patch management files directly.
Credentialed access avoids sending dangerous network probes while providing detailed, accurate vulnerability data.
3
Adjust scan engine performance parameters.
Rate-limiting and reducing concurrent target probes prevents network traffic congestion.
Lowering concurrency ensures legacy network stacks on POS devices are not overwhelmed.

Key Concept

Credentialed vs. Non-Credentialed and Intrusive vs. Non-Intrusive Vulnerability Scanning
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic