Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

Match each vulnerability scanning methodology with its corresponding operational description and primary enterprise use case.

  • Credentialed Network ScanAuthenticates to target hosts over the network using administrative privileges to audit patch levels, file permissions, and local system configurations.
  • Non-Credentialed Network ScanProbes open network ports and service banners without login credentials to evaluate external attack surfaces and exposed perimeter vulnerabilities.
  • Passive Network AssessmentMonitors network traffic via a SPAN or TAP port to discover active hosts and unencrypted protocols without generating synthetic scan traffic.
  • Agent-Based Vulnerability ScanExecutes a persistent local host service to collect continuous security telemetry and configuration compliance even when endpoints are off the corporate network.

Answer

Credentialed Network Scan pairs with host authentication and administrative auditing; Non-Credentialed Network Scan pairs with unauthenticated port/banner probing; Passive Network Assessment pairs with traffic mirror/TAP monitoring; Agent-Based Vulnerability Scan pairs with persistent local service execution for off-network endpoints.
The pairings correctly match each scanning approach with its distinct operation: Credentialed scans require host logins to audit internal configurations; Non-Credentialed scans assess external visibility without credentials; Passive assessments mirror traffic without sending packets; and Agent-based scans use local host software for continuous oversight of mobile assets.

Step-by-Step Solution

1
Identify authentication requirement levels for network-based scans.
Match credentialed scanning to administrative login probing and non-credentialed scanning to unauthenticated perimeter surface probing.
Authentication determines whether the scanner can inspect internal host state or only externally visible network behavior.
2
Evaluate traffic generation impact (active active vs passive listening).
Match passive network assessment to non-intrusive traffic monitoring via SPAN or TAP ports.
Passive monitoring observes existing packet flows without sending probes into the network.
3
Differentiate network-centric assessment from host-resident telemetry collection.
Match agent-based scanning to local persistent software services capable of auditing disconnected or roaming hosts.
Agents execute locally on the target operating system, removing reliance on active network scanning connections.

Key Concept

Vulnerability Assessment Methodologies and Scan Configuration Types
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic