Examkin

Question

Difficulty: EasyVulnerability Assessment and Security Testing Methods

An administrator needs to perform a vulnerability scan on internal servers to accurately detect missing software patches without installing host software agents. Which of the following scanning methods should the administrator use?

  1. Credentialed vulnerability scanAnswer
  2. B
    Non-credentialed vulnerability scan
  3. C
    Passive network traffic inspection
  4. D
    Inline honeypot service deployment

Answer

Credentialed vulnerability scan
A credentialed vulnerability scan allows the scanner to log into target hosts using valid permissions to inspect installed applications, registry keys, and operating system patch levels directly. This provides high accuracy and low false-positive rates without requiring permanent agent installations.

Step-by-Step Solution

1
Identify the assessment objective
The administrator must verify internal missing software patches accurately across servers without installing local agents.
Accurate patch auditing requires permission to inspect system registries and installed software databases.
2
Compare assessment methods
A credentialed scan provides authenticated remote access to query system configuration and missing patches directly.
Unauthenticated or passive methods only see open ports and exposed services, leading to incomplete results.

Key Concept

Credentialed vs. Non-Credentialed Vulnerability Scanning
Estimated Time:1m 0s
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic