Examkin

Question

Difficulty: MediumVulnerability Scanning and Assessment

Match each vulnerability assessment methodology with its corresponding operational characteristic or execution behavior.

  • Credentialed Vulnerability ScanUses administrative credentials to inspect internal software registries, missing patch levels, and host configuration files directly.
  • Non-Credentialed Vulnerability ScanSends probe packets across network interfaces without authentication to discover visible open ports and exposed service banners.
  • Passive Vulnerability AssessmentMonitors network traffic headers and packet flows continuously to identify system types and active protocols without generating synthetic network probes.
  • Intrusive Vulnerability AssessmentAttempts to exploit identified vulnerabilities or simulate attack payloads, carrying a risk of service interruption or system instability.

Answer

Credentialed Vulnerability Scan pairs with administrative privilege inspection; Non-Credentialed Vulnerability Scan pairs with unauthenticated network probing; Passive Vulnerability Assessment pairs with continuous packet monitoring without probe generation; Intrusive Vulnerability Assessment pairs with exploitation payloads that risk service interruption.
Each vulnerability scanning methodology is accurately paired with its core operational mechanics: credentialed scans use privileged access for deep internal host inspection, non-credentialed scans evaluate external attack surface exposure, passive assessments listen silently to packet streams, and intrusive assessments run exploit vectors that carry risk of service disruption.

Step-by-Step Solution

1
Analyze access level requirements for host-level visibility vs. boundary exposure.
Identified that credentialed scans require administrative accounts for internal inspection, while non-credentialed scans inspect external exposure without logons.
Vulnerability scanners operate differently depending on whether authentication tokens are provided.
2
Distinguish between active probing methods and silent traffic observation.
Matched passive vulnerability assessment to network packet monitoring because passive techniques generate zero synthetic traffic probes.
Passive monitoring is critical for sensitive operational technology environments where active probes might crash endpoints.
3
Evaluate potential system operational impact during assessment activities.
Matched intrusive vulnerability assessment to exploitation attempt behaviors that carry downtime risks.
Intrusive scans test actual exploit paths rather than simply checking banner signatures, creating potential instability.

Key Concept

Vulnerability Assessment Methodologies and Scanner Configurations
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic