Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

Match each vulnerability assessment scan type to its defining operational characteristic.

  • Credentialed ScanUses system-level account permissions to inspect internal patch levels, missing hotfixes, and detailed registry configurations.
  • Non-Credentialed ScanProbes targets from an external perspective without user account access to identify exposed services and open ports.
  • Passive ScanMonitors network traffic flow silently to identify active hosts and software versions without sending probe traffic.
  • Intrusive ScanExecutes scripts or tests that actively interact with target vulnerabilities, risking system instability or service disruption.

Answer

Credentialed Scan pairs with using system-level privileges for internal inspection; Non-Credentialed Scan pairs with unauthenticated external probing of exposed services; Passive Scan pairs with silently monitoring traffic flow without sending probes; Intrusive Scan pairs with executing tests that risk system instability or service disruption.
Each vulnerability scan type aligns with its specific operational profile: credentialed scans access host interiors using privileges, non-credentialed scans inspect external attack surfaces without privileges, passive scans collect intelligence from network traffic without packet injection, and intrusive scans run aggressive tests that may disrupt target availability.

Step-by-Step Solution

1
Identify the authentication level of the scan types.
Credentialed scans use local privileges for deep inspection, whereas non-credentialed scans simulate unauthenticated external observers.
Differentiating authentication capabilities clarifies internal inventory auditing versus surface attack view.
2
Analyze the operational impact and network traffic generation of the remaining scan types.
Passive scans capture existing traffic without transmitting data, while intrusive scans actively interact with vulnerabilities and risk causing service outages.
Understanding network traffic generation helps separate non-interfere monitoring from high-impact active testing.

Key Concept

Vulnerability assessment scan classifications (Credentialed, Non-Credentialed, Passive, Intrusive)
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic