Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

A security operations manager is updating operational procedures for vulnerability assessments across an enterprise network. Match each assessment methodology with the scenario where it is most appropriately applied.

  • Credentialed Vulnerability ScanAuditing internal servers to detect missing OS patches and local misconfigurations accurately with low false-positive rates.
  • Non-Credentialed Vulnerability ScanMapping exposed network services and unpatched software banners from an external adversary's perspective.
  • Passive Network AssessmentIdentifying connected devices and protocol traffic on sensitive industrial control system (ICS) networks without sending packets.
  • Intrusive Penetration TestingActively exploiting an identified vulnerability in a pre-production environment to prove proof-of-concept impact.

Answer

Credentialed vulnerability scanning matches host internal auditing for missing patches. Non-credentialed scanning matches external adversary perspective mapping. Passive network assessment matches non-disruptive device identification on sensitive operational technology networks. Intrusive testing matches active exploitation of vulnerabilities to verify real-world impact.
Each matching pair correctly aligns the specific vulnerability scanning or testing technique with its primary use case: Credentialed scans provide deep host visibility; Non-credentialed scans simulate external attack surfaces; Passive assessments safeguard fragile SCADA/ICS environments; and Intrusive penetration testing validates exploitation potential.

Step-by-Step Solution

1
Analyze each operational requirement to determine authentication, network impact, and safety constraints.
Identify that host patch audits require host privileges, external reconnaissance requires unauthenticated probes, sensitive legacy OT requires zero injected traffic, and impact validation requires active exploitation.
Vulnerability assessment techniques vary primarily by authorization level (credentialed vs unauthenticated), traffic interaction (active vs passive), and operational risk (intrusive vs non-intrusive).
2
Pair credentialed and non-credentialed techniques with host-based and perimeter-based scenarios respectively.
Assign credentialed scan to host configuration/patch audits, and non-credentialed scan to perimeter service mapping.
Credentials allow host registry and package manager queries, whereas non-credentialed scans rely strictly on network service responses.
3
Distinguish between passive network monitoring and intrusive penetration testing based on target sensitivity and operational goal.
Assign passive assessment to fragile ICS/SCADA networks and intrusive testing to staging environment exploitation.
Passive tools capture existing packet streams safely without causing denial of service on fragile devices, while intrusive tools actively attempt exploitation.

Key Concept

Vulnerability Assessment Methodologies and Selection Criteria
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic