Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

A security administrator is planning a routine security evaluation of internal server infrastructure. Which of the following are distinct operational advantages of conducting a credentialed vulnerability scan rather than a non-credentialed network scan? (Select TWO.)

  1. Identification of missing local software patches and operating system updatesAnswer
  2. Lower rate of false positives due to direct host configuration queryingAnswer
  3. C
    Automatic modification of network firewall rules to remediate discovered software flaws
  4. D
    Reclassification of detective scanning mechanisms into active preventive network access controls

Answer

Credentialed vulnerability scans provide direct inspection of missing local patches and system configurations while significantly reducing false positives through direct host querying.
Credentialed vulnerability scans log into target systems to directly audit local file versions, installed security updates, and configuration files. This internal visibility enables precise patch verification and dramatically reduces false positives compared to unauthenticated network probing.

Step-by-Step Solution

1
Analyze the operational differences between credentialed (authenticated) and non-credentialed (unauthenticated) vulnerability scans.
Credentialed scans log into target host operating systems using administrative access, allowing direct inspection of patch registries, local settings, and software inventories.
Understanding scanner access privileges highlights what host-level visibility is gained.
2
Evaluate the impact on reporting accuracy and false positive rates.
Direct host access provides definitive data on installed patch levels, reducing false positives caused by generic network banner grabbing.
Authenticated access eliminates guesswork for services hidden behind network security controls or running on non-standard ports.
3
Differentiate vulnerability scanners from active control mechanisms like firewalls or automated remediation systems.
Vulnerability scanners remain detective assessment tools and do not directly enforce network firewall filtering or alter security control classifications.
Scanners produce diagnostic data; mitigation requires separate patch management or configuration enforcement processes.

Key Concept

Credentialed vs. Non-Credentialed Vulnerability Scanning
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic