A security analyst is reviewing results from a routine network vulnerability scan targeting internal application servers. The generated report lists open network ports and OS banners, but fails to identify missing operating system patches, misconfigured registry settings, or internal web application vulnerabilities. Which of the following adjustments should the analyst make to resolve these scanning visibility gaps? (Select TWO)
- Provide valid administrative credentials to the scanner to perform local host checks.Answer
- BConfigure inline network intrusion prevention system (NIPS) signatures to automatically remediate missing host patches.
- Run an authenticated web application vulnerability scan targeted at inspecting dynamic application code and scripts.Answer
- DReclassify the scanner IP address within perimeter firewalls to function as a detective compensating control.
Answer
The analyst should provide valid administrative credentials for host-level checks and execute an authenticated web application vulnerability scan.
Uncredentialed network scans can only identify exposed network ports and basic service banners. To detect missing operating system patches and misconfigured registry keys, the scanner requires administrative credentials to perform host-based checks. Similarly, assessing web application vulnerabilities requires dedicated, application-aware scanning techniques to audit client-side scripts and application logic.
Step-by-Step Solution
Key Concept
Credentialed vs. Uncredentialed Vulnerability Scanning and Web Application Assessment Methods