Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

A security administrator is preparing to perform a credentialed vulnerability scan on internal application servers. Which of the following represent primary advantages of using a credentialed vulnerability scan instead of an unauthenticated scan? (Select TWO.)

  1. Accurate identification of missing internal software patches and local configuration settingsAnswer
  2. Significantly lower rate of false-positive vulnerability findings in scan reportsAnswer
  3. C
    Automated exploitation and immediate remediation of identified system flaws
  4. D
    Real-time inline filtering and blocking of malicious network traffic directed at target systems

Answer

The correct advantages are accurate identification of missing internal software patches and local configuration settings, and a significantly lower rate of false-positive vulnerability findings in scan reports.
Credentialed (authenticated) vulnerability scans log directly into target host systems using administrative credentials. This allows the scanner to query local package management databases, inspect registry configurations, and verify exact software build numbers. As a result, credentialed scans provide precise patch visibility and drastically minimize false positives compared to unauthenticated network scans.

Step-by-Step Solution

1
Analyze the scanning context and capability requirements
Recognize that credentialed (authenticated) scans operate with administrative access on target operating systems.
Authenticating to target systems enables direct local inspection of host resources, configuration files, and installed software registries.
2
Evaluate the benefits of credentialed access against non-credentialed access
Identify that host-level inspection yields precise patch inventory data and reduces misidentifications (false positives).
Unauthenticated scans rely on external network responses and banner grabbing, which often produce false positives when services conceal exact version information.
3
Distinguish vulnerability assessment functions from active defense and remediation tools
Rule out automatic remediation and inline network traffic blocking.
Assessment scanners focus on discovery and reporting rather than active remediation or inline network filtering.

Key Concept

Credentialed vs. Unauthenticated Vulnerability Scanning
Estimated Time:50s
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic