A security analyst is defining standard testing procedures for an enterprise vulnerability management program. Match each security assessment method to its corresponding operational description.
- Passive Vulnerability ScanningMonitors network traffic flow silently to discover active hosts and services without transmitting probes.
- Credentialed Vulnerability ScanningLogs into target systems using valid accounts to audit installed patches and internal configurations.
- Dynamic Application Security Testing (DAST)Tests a running application by sending simulated malicious requests to identify runtime flaws.
- Static Application Security Testing (SAST)Analyzes application source code or compiled binaries offline without executing the application.
Answer
Passive Vulnerability Scanning corresponds to monitoring network traffic silently without probes. Credentialed Vulnerability Scanning corresponds to logging into target systems with valid accounts to audit configuration and patches. Dynamic Application Security Testing (DAST) corresponds to testing a running application by sending simulated malicious requests. Static Application Security Testing (SAST) corresponds to analyzing source code or binaries offline without code execution.
Each assessment method is paired according to its execution environment and access model: Passive scanning observes network traffic without active probing; Credentialed scanning uses valid host credentials for accurate internal assessment; DAST tests live applications at runtime; SAST analyzes unexecuted source code or binaries.
Step-by-Step Solution
Key Concept
Vulnerability Assessment and Security Testing Methods