Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

A security analyst is evaluating different testing procedures to incorporate into an organization's vulnerability management policy. Match each security testing method on the left with its corresponding operational characteristic on the right.

  • Credentialed Host ScanLeverages valid administrative privileges to audit local registry settings, missing patches, and host configurations with low network overhead.
  • Passive Network MonitoringAnalyzes unencrypted packet headers and traffic flows silently to catalog active services without sending probe packets to target hosts.
  • Interactive Application Security Testing (IAST)Deploys runtime agents inside the application engine to inspect code execution and data flow while functional tests are being run.
  • Wardriving AssessmentUses specialized wireless detection equipment while moving around a facility perimeter to locate unauthorized access points and signal leakage.

Answer

Credentialed Host Scan matches with leveraging administrative privileges to audit local host configurations; Passive Network Monitoring matches with analyzing packet headers silently without active probing; Interactive Application Security Testing (IAST) matches with deploying runtime agents inside the application engine; Wardriving Assessment matches with using wireless detection equipment around facility perimeters to locate rogue access points.
Each testing method is paired with its specific operational mechanism: credentialed scans use elevated login access for local auditing; passive monitoring relies on packet sniffing without traffic generation; IAST uses embedded agents during execution; and wardriving surveys physical boundaries for wireless emissions and unauthorized access points.

Step-by-Step Solution

1
Analyze Credentialed Host Scan operational requirements
Identify that credentialed scanning requires authentication to target hosts to examine internal configurations and missing hotfixes.
Administrative credentials allow direct querying of local operating system settings and installed updates.
2
Evaluate Passive Network Monitoring characteristics
Match with silent packet header analysis without sending network probes.
Passive monitoring observes existing network traffic on a span/mirror port rather than generating active probe traffic.
3
Examine Interactive Application Security Testing (IAST) architecture
Connect IAST to agent-based runtime application code inspection during execution.
IAST combines aspects of SAST and DAST by placing sensors inside the runtime engine while tests execute.
4
Identify Wardriving Assessment physical and RF footprint parameters
Associate wardriving with perimeter wireless signal detection and rogue access point mapping.
Wardriving specifically tests wireless perimeter security by detecting RF leakage and unauthorized access points.

Key Concept

Vulnerability Assessment and Security Testing Methods
Estimated Time:1m 30s
Rate this question