Examkin

Question

Difficulty: EasyVulnerability Assessment and Security Testing Methods

A cybersecurity analyst needs to assess internal enterprise servers for missing software security patches and configuration flaws without sending intrusive exploit payloads or generating heavy network traffic across the subnet. Which of the following vulnerability assessment methods should the analyst perform?

  1. A credentialed vulnerability scanAnswer
  2. B
    An inline honeypot deployment to intercept probe traffic
  3. C
    A perimeter firewall rule adjustment to block scan ports
  4. D
    A Cross-Site Scripting (XSS) payload sweep against database ports

Answer

The analyst should perform a credentialed vulnerability scan.
A credentialed vulnerability scan uses valid system credentials to authenticate directly onto host systems. This permits the scan engine to inspect internal registry keys, patch management records, and software configurations with minimal network bandwidth usage and without executing invasive attack probes.

Step-by-Step Solution

1
Analyze the operational requirements
The assessment must identify missing patches and local configuration flaws while avoiding high network overhead and intrusive probes.
Uncredentialed scans rely on network-based probes that generate high traffic and can miss internal configuration flaws.
2
Select the appropriate scanning methodology
A credentialed scan authenticates locally on the host to read configuration settings and patch status directly.
Authenticating locally minimizes network footprint and provides accurate inventory without executing intrusive exploits.

Key Concept

Credentialed Vulnerability Scanning
Estimated Time:50s
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic