A security analyst is evaluating different testing procedures to incorporate into an organization's vulnerability management policy. Match each security testing method on the left with its corresponding operational characteristic on the right.
- Credentialed Host ScanLeverages valid administrative privileges to audit local registry settings, missing patches, and host configurations with low network overhead.
- Passive Network MonitoringAnalyzes unencrypted packet headers and traffic flows silently to catalog active services without sending probe packets to target hosts.
- Interactive Application Security Testing (IAST)Deploys runtime agents inside the application engine to inspect code execution and data flow while functional tests are being run.
- Wardriving AssessmentUses specialized wireless detection equipment while moving around a facility perimeter to locate unauthorized access points and signal leakage.
Answer
Credentialed Host Scan matches with leveraging administrative privileges to audit local host configurations; Passive Network Monitoring matches with analyzing packet headers silently without active probing; Interactive Application Security Testing (IAST) matches with deploying runtime agents inside the application engine; Wardriving Assessment matches with using wireless detection equipment around facility perimeters to locate rogue access points.
Each testing method is paired with its specific operational mechanism: credentialed scans use elevated login access for local auditing; passive monitoring relies on packet sniffing without traffic generation; IAST uses embedded agents during execution; and wardriving surveys physical boundaries for wireless emissions and unauthorized access points.
Step-by-Step Solution
Key Concept
Vulnerability Assessment and Security Testing Methods
Estimated Time:1m 30s