Question

Difficulty: MediumVulnerability Scanning and Assessment

Match each vulnerability assessment methodology with its most appropriate enterprise operational deployment scenario.

  • Credentialed Vulnerability ScanningAudit internal local system configurations, installed software inventories, and missing patch levels with high accuracy and reduced false positives.
  • Non-Credentialed Vulnerability ScanningEvaluate the perimeter network to determine exposed ports and public-facing services as seen from an unauthenticated external attacker perspective.
  • Agent-Based ScanningMaintain continuous vulnerability visibility for remote laptops and transient endpoints that frequently disconnect from the corporate network.
  • Passive Network AssessmentIdentify active hosts and network traffic anomalies across legacy Operational Technology (OT) and SCADA environments sensitive to active probing.

Answer

Credentialed Vulnerability Scanning pairs with internal configuration and patch auditing; Non-Credentialed Vulnerability Scanning pairs with perimeter external attacker perspective evaluation; Agent-Based Scanning pairs with continuous visibility for remote and transient endpoints; Passive Network Assessment pairs with traffic monitoring for sensitive OT/SCADA systems.
Credentialed vulnerability scanning delivers accurate internal patch and software configuration details using privilege-based access. Non-credentialed scanning replicates external threat actor visibility by testing open ports and services without user credentials. Agent-based scanning ensures continuous host monitoring regardless of endpoint network attachment. Passive network assessment monitors network packet streams safely without generating active traffic that could disrupt sensitive OT hardware.

Step-by-Step Solution

1
Analyze Credentialed Scanning requirements
Requires authentication to query host OS internals and software inventory.
Allows deep host inspection with low false positives.
2
Analyze Non-Credentialed Scanning capabilities
Probes exposed services over the network without logging in.
Simulates external adversary visibility.
3
Analyze Agent-Based Scanning advantages
Executes audits directly on local endpoint hardware.
Provides coverage for mobile devices that do not regularly attach to the local network.
4
Analyze Passive Assessment constraints
Listens to packet flows on span/mirror ports without transmitting probes.
Prevents system disruption on fragile industrial control systems.

Key Concept

Vulnerability Assessment Methodologies and Use Cases
Rate this question