Following an enterprise-wide remediation effort to patch critical remote code execution vulnerabilities across multiple database servers, a security analyst must confirm that all identified flaws have been successfully resolved. To complete this verification efficiently without causing unnecessary network overhead or waiting for a complete multi-subnet scan cycle, which of the following scanning approaches should the analyst execute?
- Execute a targeted differential scan scoped specifically to the previously affected assets and CVE identifiers.Answer
- BConfigure inline firewall rules to block inbound network access to the database ports instead of verifying patch installation.
- CDeploy web application firewall rules configured to filter cross-site scripting payloads across the internal server subnet.
- DDeploy an intrusion detection system as a detective security control to replace scheduled follow-up vulnerability assessments.
Answer
Execute a targeted differential scan scoped specifically to the previously affected assets and CVE identifiers.
Executing a targeted differential scan (also known as a remediation scan) allows security analysts to re-assess only the specific hosts and vulnerabilities identified in prior reports. This approach directly validates patch deployment success while minimizing scan duration and network resource consumption.
Step-by-Step Solution
Key Concept
Remediation and Differential Vulnerability Scanning