Examkin

Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

A security team needs to perform continuous vulnerability assessment on legacy enterprise servers that are prone to crashing when subjected to heavy network port probes. The solution must accurately detect missing operating system patches and misconfigurations without generating extra network traffic or risking application instability. Which of the following security assessment methods should the team implement?

  1. Deploying host-based vulnerability assessment agents directly on the legacy serversAnswer
  2. B
    Configuring aggressive active network vulnerability scans over the local subnet
  3. C
    Deploying an inline honeypot in front of the application database
  4. D
    Implementing perimeter firewall rules to block incoming ICMP and port scans

Answer

Deploying host-based vulnerability assessment agents directly on the legacy servers is the most appropriate method.
Host-based vulnerability agents execute directly within the target operating system. They evaluate system files, installed patches, and configurations locally without transmitting probe traffic across the network, ensuring complete vulnerability visibility while preventing accidental crashes of fragile legacy services.

Step-by-Step Solution

1
Analyze the operational constraints of the target environment.
Identified key constraints: fragile legacy servers that crash under network probes, requirement for low network overhead, and need for accurate patch detection.
Selecting an effective vulnerability assessment technique requires matching scanning methods to host stability and network impact constraints.
2
Compare host-based agent architecture with network-based scanning methods.
Host-based agents inspect installed packages, OS build numbers, and registry settings locally, bypassing network probe traffic entirely.
Agent-based scanning eliminates network transmission overhead and prevents service disruption on sensitive hosts.

Key Concept

Host-based Vulnerability Assessment Agents vs. Network-based Scans
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic