Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

A cybersecurity analyst is setting up a scheduled vulnerability assessment for production servers. The main requirement is to identify missing patches and misconfigurations without risking system crashes or service outages. Which scanning method should the analyst use?

  1. Non-intrusive vulnerability scanAnswer
  2. B
    Intrusive vulnerability scan
  3. C
    Active penetration test
  4. D
    Web application firewall log review

Answer

The analyst should select a non-intrusive vulnerability scan.
A non-intrusive vulnerability scan identifies security weaknesses, missing patches, and misconfigurations by inspecting version strings and configuration data without attempting to exploit the vulnerabilities. This satisfies the requirement to safely assess systems without taking production services offline.

Step-by-Step Solution

1
Identify the primary operational constraint in the scenario.
The assessment must assess system security without causing service outages or system instability on production servers.
Production environments require safe testing methods that minimize operational downtime risks.
2
Evaluate scanning techniques against the constraint.
Non-intrusive scans query systems for version information and known flaw indicators without trying to exploit them.
Exploitation attempts are reserved for intrusive scans and penetration testing.
3
Select the appropriate scanning technique.
Choose a non-intrusive vulnerability scan as the safest assessment option.
It fulfills the requirement to identify vulnerabilities safely without risking service interruption.

Key Concept

Non-intrusive vs. Intrusive Vulnerability Scanning
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic