Examkin

Question

Difficulty: HardVulnerability Scanning and Assessment

During a security evaluation of a segmented payment processing environment, an analyst runs an automated vulnerability assessment against a cluster of Linux servers holding cardholder data. The final report lists open network ports and service banners, but fails to identify installed software patch levels or local kernel flaws. Further inspection reveals that administrative SSH credentials were properly entered into the scanner configuration, but network access control lists blocked SSH protocol traffic while permitting HTTPS traffic between the scanner and targets. Which of the following best accounts for the missing host-level vulnerability data in the final report?

  1. The scanner fell back to an uncredentialed network assessment because it could not establish an SSH management session to query local package management databases.Answer
  2. B
    The scanner automatically applied a compensating security control that suppressed internal vulnerability reporting upon detecting active TLS/HTTPS encryption on target ports.
  3. C
    The assessment was executed in an intrusive scanning mode, which suppresses local credentialed checks to minimize service operational disruption.
  4. D
    The scanner prioritized web application payloads over operating system vulnerabilities because the target servers exposed public HTTPS endpoints.

Answer

The missing host-level vulnerability data occurred because the scanner fell back to an uncredentialed network assessment after network access control lists blocked its SSH authentication session.
Credentialed vulnerability scans require an active administrative session (such as SSH for Linux or WMI/WinRM for Windows) to inspect internal system configurations, patch levels, and installed packages. When network access control lists block the required protocol port, the scanner cannot authenticate and silently falls back to an uncredentialed network scan. Consequently, it can only report externally visible information like open ports and service banners, omitting internal host-level vulnerabilities.

Step-by-Step Solution

1
Analyze the scanner configuration and network path parameters in the scenario.
Administrative SSH credentials were configured on the scanner, but network ACLs blocked SSH traffic while allowing HTTPS traffic.
Establishing a credentialed scan requires successful end-to-end network connectivity on the administrative protocol (SSH port 22).
2
Evaluate how vulnerability scanners handle authentication session failure.
When authentication protocol traffic is blocked by a network firewall or ACL, the scanner cannot authenticate locally and degrades to an uncredentialed network probe.
Uncredentialed network scans rely only on banner grabbing and exposed network services, missing local OS patch states, file permissions, and kernel vulnerabilities.
3
Select the option that accurately describes this scanner fallback behavior.
The option explaining that the scanner defaulted to an uncredentialed network assessment due to failed SSH connectivity is correct.
It directly links the network ACL restriction on SSH to the absence of host-level patch and package vulnerability findings.

Key Concept

Credentialed vs. Uncredentialed Vulnerability Scanning
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic