A security team is experiencing severe performance degradation on production database servers whenever network-based vulnerability scans occur. The team must maintain comprehensive vulnerability visibility while eliminating operational disruption to high-traffic database services. Which of the following strategies should the security team implement to resolve this issue? (Select TWO.)
- Configure scan rate limits and throttle packet transmission speeds on the vulnerability scanner targeting production database subnets.Answer
- Deploy host-based vulnerability scanning agents on the database servers to collect local security metadata directly.Answer
- CConfigure an inline network intrusion prevention system (NIPS) to automatically drop vulnerability scanner traffic when database load exceeds thresholds.
- DSwitch to unauthenticated network port sweeps during peak operational hours to eliminate host authentication processing overhead.
Answer
The security team should configure scan rate limits on network scanners and deploy host-based scanning agents on database servers.
Configuring scan rate limiting reduces the frequency and density of network probes sent to production systems, preventing socket exhaustion and high CPU spikes. Concurrently, deploying host-based agents allows local inventory and vulnerability evaluation without relying on heavy network-based probing, achieving low-overhead auditing.
Step-by-Step Solution
Key Concept
Vulnerability Scanner Performance Optimization and Agent vs. Network-based Scanning