Examkin

Question

Difficulty: HardVulnerability Scanning and Assessment

A security operations team must implement appropriate vulnerability assessment methodologies across four distinct IT and operational environments. Which vulnerability scanning approach best matches each enterprise operational requirement?

  • Non-intrusive Credentialed ScanSafely auditing missing OS hotfixes and software inventories on production database servers during business hours without risk of system instability.
  • Passive Vulnerability MonitoringIdentifying active network hosts and exposed services in a sensitive Operational Technology (OT / ICS) network without transmitting probe packets.
  • Intrusive Exploitation ScanVerifying whether a detected remote code execution vulnerability can actually yield a functional command shell in an isolated staging environment.
  • Authenticated Dynamic Application ScanEvaluating session handling, cross-site scripting, and authorization flaws behind a user login prompt on a pre-production web application.

Answer

The correct pairing matches: Non-intrusive Credentialed Scan with auditing production database OS updates safely; Passive Vulnerability Monitoring with assessing sensitive OT/ICS networks without sending packets; Intrusive Exploitation Scan with confirming shell access from a remote code execution vulnerability in staging; and Authenticated Dynamic Application Scan with analyzing web vulnerabilities behind a login prompt.
Vulnerability scanner methodologies must align with system risk tolerance and application architecture. Passive monitoring avoids packet transmission for delicate operational technology. Non-intrusive credentialed scans safely query local package managers via host credentials. Intrusive scans perform real exploitation checks to confirm true positives in test environments. Authenticated dynamic scans execute web request payloads behind application login mechanisms.

Step-by-Step Solution

1
Evaluate the requirements and constraints for legacy OT/ICS networks.
Determine that packet injection can crash legacy SCADA controllers, making packetless monitoring necessary.
Passive vulnerability monitoring collects asset and vulnerability intelligence solely by sniffing network traffic.
2
Determine the safest method to verify patch compliance on production hosts during operational hours.
Select non-intrusive credentialed scanning.
Host credentials allow direct inspection of local package manifests without generating heavy or disruptive network attack traffic.
3
Identify the technique required to confirm functional exploitability of a critical flaw.
Select intrusive exploitation scanning.
Intrusive scans validate exploitability by actively executing exploit scripts against target vulnerabilities.
4
Match the web application testing requirement for authenticated areas.
Select authenticated dynamic application scanning.
DAST crawlers require session tokens to traverse and analyze access controls, session state, and input fields behind login interfaces.

Key Concept

Vulnerability Scanning Methodologies and Environmental Constraints
Estimated Time:2m 0s
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic