Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

A security analyst is configuring an internal vulnerability assessment for a enterprise web platform located behind a reverse proxy. The platform includes legacy application services that are highly sensitive to traffic spikes. The analyst needs to obtain precise host vulnerability data while preventing service outages on legacy components. Which of the following scanner configurations and techniques should the analyst implement? (Select TWO.)

  1. Utilize credentialed scanning parameters to inspect local software package registries directly on host operating systems.Answer
  2. Configure scan rate throttling and select non-intrusive check modules during the scan execution.Answer
  3. C
    Rely on unauthenticated banner grabbing through the reverse proxy to infer backend application patch levels.
  4. D
    Execute automated penetration testing exploitation scripts during the discovery phase to confirm vulnerability existence.

Answer

The analyst should use credentialed scanning to examine internal package registries on hosts directly, while enabling scan rate throttling and non-intrusive checks to safeguard legacy services.
Credentialed scanning provides direct, internal access to host package managers and OS registries, yielding accurate vulnerability identification. Combining credentialed access with scan rate throttling and non-intrusive test modules ensures high detection fidelity while maintaining service stability on sensitive legacy infrastructure.

Step-by-Step Solution

1
Determine the scanning method that provides high host accuracy without relying on proxy responses.
Selecting credentialed scanning allows the scanner to log into target systems and inspect local package manager databases and configurations directly.
Unauthenticated network scans behind a reverse proxy only observe front-end proxy headers, leading to high false-positive rates.
2
Establish operational parameters to protect fragile legacy backend systems.
Enabling scan throttling and non-intrusive vulnerability test modules prevents excessive concurrent traffic and unsafe payload delivery.
Legacy systems are vulnerable to denial-of-service conditions when exposed to high request volumes or intrusive test vectors.

Key Concept

Vulnerability scanning configuration parameters (credentialed vs unauthenticated scanning and intrusive vs non-intrusive test controls)
Estimated Time:1m 30s
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic