A security administrator must perform regular vulnerability assessments on production enterprise servers hosting critical database applications. The organization requires detailed visibility into missing OS security patches and host configuration compliance, but must avoid destabilizing active production services or triggering target account lockouts. Which vulnerability testing approach should the administrator implement to meet these requirements?
- Run a credentialed vulnerability assessment using a dedicated read-only service account.Answer
- BPerform an uncredentialed vulnerability scan using aggressive exploit payloads and brute-force service authentication checks.
- CDeploy deception honeypots alongside production database servers to capture active vulnerability exploits.
- DExecute dynamic application security testing scripts with client-side script injection payloads directed at database network interfaces.
Answer
Run a credentialed vulnerability assessment using a dedicated read-only service account.
Credentialed vulnerability assessments utilize valid account credentials to access local system resources directly. This allows the assessment scanner to read system patch levels, registry configurations, and installed software indices safely without triggering network intrusion alarms or brute-force account lockout thresholds.
Step-by-Step Solution
Key Concept
Credentialed vs. Uncredentialed Vulnerability Assessment Methods