Examkin

Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

A systems administrator observes that unauthenticated, network-based vulnerability scans are failing to detect internal software patch status and host misconfigurations due to strict host-based firewall rules blocking network probes on corporate endpoints. The administrator needs to collect detailed vulnerability data across all endpoints without altering network firewall policies or exposing administrative credentials across network subnets. Which of the following vulnerability assessment methods should the administrator implement?

  1. Deploy agent-based vulnerability scanning software directly onto each endpoint target.Answer
  2. B
    Deploy an inline honeypot within the endpoint network segment to capture vulnerability data.
  3. C
    Execute dynamic application security testing (DAST) across internal network subnets.
  4. D
    Implement perimeter firewall compensating controls to mitigate unpatched operating system flaws.

Answer

Deploying agent-based vulnerability scanning software directly onto each endpoint target.
Deploying agent-based vulnerability scanning software places lightweight software agents directly on target hosts. The agent performs local assessment of installed packages, missing patches, and system registry configurations without requiring open inbound network ports or sending privileged credentials across the network.

Step-by-Step Solution

1
Analyze the operational constraints presented in the scenario.
Network-based scanning is blocked by host-based firewalls, and passing administrative credentials across subnets must be avoided.
Host firewalls block unauthenticated network probes, preventing standard external scanning engines from probing open ports and banner information.
2
Evaluate assessment methods against local access requirements.
Agent-based scanning runs locally on endpoints with local administrative privileges.
Local agents execute host checks directly inside the operating system, bypassing network-level filtering and eliminating the need to transmit high-privilege credentials across the network.

Key Concept

Agent-based versus network-based vulnerability scanning techniques
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic