Examkin

Question

Difficulty: MediumVulnerability Assessment and Security Testing Methods

A security consultant is evaluating vulnerability assessment strategies for an enterprise hybrid environment that contains both standard server infrastructure and sensitive legacy Operational Technology (OT) systems. The consultant must recommend assessment techniques that accurately identify missing patches and host misconfigurations while minimizing the risk of system instability or network interruption on sensitive legacy segments. Which of the following approaches should the consultant recommend? (Select TWO.)

  1. Perform credentialed vulnerability scanning on host systems to directly audit installed software and missing patches with minimal network overhead.Answer
  2. Deploy passive network traffic monitoring to identify legacy devices and active service vulnerabilities without transmitting probe packets to OT hosts.Answer
  3. C
    Configure an inline honeypot in front of legacy OT assets to serve as a primary preventive firewall control against exploit traffic.
  4. D
    Deploy Web Application Firewalls (WAF) to conduct static source code security testing on underlying host operating systems.
  5. E
    Execute intrusive penetration testing scripts containing active exploit payloads directly against sensitive OT systems during business hours.

Answer

The consultant should recommend performing credentialed vulnerability scanning on host systems and deploying passive network traffic monitoring for legacy OT devices.
The combination of credentialed scanning and passive monitoring allows the organization to accurately assess system security posture without causing outages. Credentialed scans access host operating systems securely to audit software patch levels cleanly. Passive network traffic analysis captures packet data non-intrusively to discover legacy OT devices and services without sending disruptive probes.

Step-by-Step Solution

1
Evaluate the operational requirements and safety constraints of fragile legacy systems versus standard host infrastructure.
Identified that standard network probes can cause legacy OT controllers to crash or malfunction, requiring non-intrusive techniques.
Vulnerability assessment techniques must align with system tolerance to avoid operational downtime.
2
Select non-intrusive host assessment and network monitoring methods.
Chose credentialed scanning (which logs directly into hosts to read patch databases without heavy network probing) and passive network monitoring (which observes traffic silently without transmitting probes).
Both methods gather necessary vulnerability data while preventing system disruption and reducing false positives.

Key Concept

Vulnerability Assessment and Security Testing Methods
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic