Examkin

Question

Difficulty: Very hardVulnerability Scanning and Assessment

An enterprise security engineer is configuring vulnerability assessment approaches across specialized network segments and target environments. Match each operational scenario on the left with the scanning methodology or configuration best suited to satisfy its operational requirements on the right.

  • Auditing mobile workforce endpoints operating off-network without requiring VPN connectivity or subjecting host interfaces to active port scanningEndpoint Agent-Based Scanning
  • Discovering active assets and potential vulnerabilities within a legacy SCADA environment where active probe packets risk triggering physical component outagesPassive Network Monitoring
  • Testing a running web application for dynamic injection vulnerabilities and session management defects without needing local host OS credentialsDynamic Application Security Testing (DAST)
  • Evaluating external perimeter security exposure strictly from the perspective of an external untrusted adversary with zero internal network accessExternal Non-Credentialed Scanning

Answer

Each scenario maps to its respective specialized methodology: off-network endpoints use agent-based scanning; sensitive SCADA environments require passive network monitoring; web application testing uses DAST; and perimeter testing requires external non-credentialed scanning.
Each scenario maps directly to its intended scanning approach based on target architecture, network reachability, protocol layer, and operational risk tolerance.

Step-by-Step Solution

1
Analyze the operational constraints of mobile workforce endpoints operating without VPN connection.
Agent-based scanning operates locally on endpoints and reports back independently of local network connectivity, matching the mobile workforce requirement.
Network-based scanning requires reachable IP pathways or VPN connections that off-network laptops lack.
2
Evaluate the sensitivity constraints of legacy operational technology (SCADA) environments.
Passive network monitoring listens to wire traffic without sending active probe packets that could fault fragile PLCs.
Active probing can cause legacy OT devices to crash or behave unpredictably.
3
Examine the requirements for evaluating running web application code flaws without OS credentials.
DAST probes the web application protocol stack in a running state, identifying web-layer vulnerabilities without requiring host OS logins.
DAST evaluates input handling and session security externally at the application layer.
4
Determine the methodology for assessing perimeter exposure from an untrusted external perspective.
External non-credentialed scanning targets public-facing IP addresses outside the perimeter without authentication credentials.
This accurately mimics the vantage point and access level of an external attacker.

Key Concept

Vulnerability Scanning Methodologies and Environment-Specific Configurations
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic