Examkin

Question

Difficulty: Very hardVulnerability Assessment and Security Testing Methods

A senior security engineering team is formalizing an enterprise security assessment policy spanning corporate workstations, custom web microservices, software build pipelines, and sensitive industrial control network segments. Match each security testing methodology on the left to the operational execution characteristic on the right that correctly defines its technical application.

  • Credentialed Vulnerability AssessmentLogs directly into target OS hosts using management protocols (e.g., SSH, WinRM) to inventory installed software, local patches, and registry configurations.
  • Dynamic Application Security Testing (DAST)Executes black-box attacks against a running application interface without internal codebase access to evaluate runtime security responses and input handling.
  • Static Application Security Testing (SAST)Analyzes application source code or compiled binaries in a non-running state to discover structural flaws and syntax vulnerabilities early in the CI/CD pipeline.
  • Passive Network Vulnerability MonitoringInspects mirrored network traffic via SPAN/TAP ports asynchronously to infer active services and unpatched software versions without transmitting network probes.

Answer

Credentialed Vulnerability Assessment matches with internal remote host configuration auditing via OS management protocols; Dynamic Application Security Testing (DAST) matches with black-box runtime application fault injection; Static Application Security Testing (SAST) matches with non-executing source code/binary analysis; Passive Network Vulnerability Monitoring matches with non-intrusive traffic packet analysis via mirrored ports.
Each security testing technique is accurately paired based on its operational state and execution mechanics: Credentialed assessment queries host internals via logged-in OS protocols; DAST tests live running application web endpoints; SAST inspects uncompiled source code statically; Passive network monitoring listens to mirrored packet traffic asynchronously.

Step-by-Step Solution

1
Analyze host assessment methodologies for privilege usage
Identified Credentialed Vulnerability Assessment as requiring elevated user privileges to inspect local OS registries and missing patches via remote management protocols.
Authentic internal auditing requires credentials to bypass external firewall boundaries and query host internals directly.
2
Differentiate application security testing modes (SAST vs DAST)
Matched SAST to static non-running code analysis in build pipelines, and DAST to active runtime black-box testing against executing web interfaces.
SAST evaluates code structure before deployment, whereas DAST evaluates application runtime response and input validation under execution.
3
Evaluate non-intrusive network testing techniques for fragile environments
Matched Passive Network Vulnerability Monitoring with mirrored traffic packet inspection without active packet injection.
Passive monitoring relies on SPAN/TAP packet captures, preventing active network scans from crashing sensitive OT/ICS controllers.

Key Concept

Vulnerability Assessment and Security Testing Methods
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic