Examkin

Question

Difficulty: EasyVulnerability Assessment and Security Testing Methods

Match each vulnerability assessment and security testing method on the left with its appropriate operational description on the right.

  • Credentialed Vulnerability ScanUses valid host credentials to inspect internal OS configurations, missing patches, and local registries.
  • Passive Vulnerability MonitoringCaptures and inspects live network traffic packet streams to identify active hosts and software without sending probes.
  • Dynamic Application Security Testing (DAST)Evaluates a running web application from an external perspective by simulating client interactions.
  • Static Application Security Testing (SAST)Analyzes uncompiled source code or binary files for security flaws prior to application execution.

Answer

Credentialed Vulnerability Scan pairs with using valid host credentials to inspect internal OS configurations and patches; Passive Vulnerability Monitoring pairs with capturing live network traffic packet streams without sending probes; Dynamic Application Security Testing (DAST) pairs with evaluating a running web application from an external perspective; Static Application Security Testing (SAST) pairs with analyzing uncompiled source code prior to application execution.
The methods align accurately with their operational characteristics: Credentialed scanning uses administrative access for internal system auditing; Passive monitoring sniffs network telemetry without active probing; DAST tests live executing applications externally; SAST analyzes static source code prior to deployment.

Step-by-Step Solution

1
Classify application security testing based on execution state.
Identify that SAST evaluates source code in a static state, whereas DAST requires a deployed, running application.
Execution state dictates whether analysis is conducted inside-out (source code) or outside-in (runtime testing).
2
Distinguish between authenticated system scanning and passive network monitoring.
Recognize that credentialed scans log into endpoints for internal inspection, while passive monitoring sniffs packet headers non-intrusively.
Credential access enables deep host-level configuration auditing, while passive capture avoids generating additional network overhead.

Key Concept

Vulnerability Assessment and Security Testing Methods
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic