Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

A security administrator must perform regular vulnerability assessments on production enterprise servers hosting critical database applications. The organization requires detailed visibility into missing OS security patches and host configuration compliance, but must avoid destabilizing active production services or triggering target account lockouts. Which vulnerability testing approach should the administrator implement to meet these requirements?

  1. Run a credentialed vulnerability assessment using a dedicated read-only service account.Answer
  2. B
    Perform an uncredentialed vulnerability scan using aggressive exploit payloads and brute-force service authentication checks.
  3. C
    Deploy deception honeypots alongside production database servers to capture active vulnerability exploits.
  4. D
    Execute dynamic application security testing scripts with client-side script injection payloads directed at database network interfaces.

Answer

Run a credentialed vulnerability assessment using a dedicated read-only service account.
Credentialed vulnerability assessments utilize valid account credentials to access local system resources directly. This allows the assessment scanner to read system patch levels, registry configurations, and installed software indices safely without triggering network intrusion alarms or brute-force account lockout thresholds.

Step-by-Step Solution

1
Analyze the operational requirements provided in the scenario.
Identified key requirements: high-accuracy detection of OS/software missing patches, verification of internal system configurations, zero risk of account lockouts, and minimal service impact.
Vulnerability assessment techniques vary in aggressiveness, resource usage, and internal system visibility.
2
Compare credentialed scanning against uncredentialed and dynamic testing techniques.
Credentialed scanning logs directly into the target operating system via a low-privileged read-only account, querying installed packages and configuration files without injecting active exploit payloads.
Logging in locally provides comprehensive internal patch visibility while avoiding service disruption or brute-force account lockouts.

Key Concept

Credentialed vs. Uncredentialed Vulnerability Assessment Methods
Rate this question