Examkin

Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

Match each vulnerability assessment and security testing method to its corresponding operational characteristic.

  • Credentialed Vulnerability ScanningUses administrative credentials to query target systems directly for missing security patches and misconfigurations.
  • Static Application Security Testing (SAST)Analyzes application source code or compiled binaries from an internal perspective without executing the code.
  • Dynamic Application Security Testing (DAST)Evaluates a running application by sending simulated attacks from an external perspective to discover runtime flaws.
  • Passive Network Vulnerability MonitoringInspects mirrored packet flows to identify host OS versions and unencrypted protocols without sending probe traffic.

Answer

Credentialed Scanning pairs with direct host queries using administrative rights; SAST pairs with non-execution analysis of source code; DAST pairs with external black-box testing of running applications; Passive Monitoring pairs with analyzing mirrored packet flows without active probes.
Each security assessment method maps directly to its core function: credentialed scanning uses administrative access for host audits; SAST analyzes uncompiled/static code; DAST tests executing web apps; and passive network monitoring analyzes mirrored traffic safely.

Step-by-Step Solution

1
Identify the operation mode of Credentialed Vulnerability Scanning.
It logs into host operating systems using administrative credentials to check patch levels.
Authenticating directly to target hosts yields internal configuration visibility without relying on network probing.
2
Distinguish SAST from DAST based on application execution status.
SAST checks static code prior to deployment, while DAST tests live, running web applications.
SAST identifies code-level security issues before execution, whereas DAST uncovers runtime configuration and input handling weaknesses.
3
Differentiate passive monitoring from active vulnerability scanning.
Passive monitoring relies on mirrored network telemetry without generating active probe traffic.
Observing traffic non-intrusively protects sensitive environments (such as OT/ICS) from network-induced destabilization.

Key Concept

Selecting appropriate vulnerability testing methodologies based on execution state, authentication level, and operational impact risk.
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic