Examkin

Question

Difficulty: EasyVulnerability Scanning and Assessment

A security technician needs to conduct a vulnerability scan on an internal application server to accurately identify missing software patches and internal misconfigurations without disrupting active services. Which of the following scanning approaches best satisfies these requirements?

  1. Credentialed, non-intrusive scanAnswer
  2. B
    Non-credentialed, intrusive scan
  3. C
    External penetration test
  4. D
    Passive network monitoring

Answer

Credentialed, non-intrusive scan
A credentialed, non-intrusive scan uses valid system credentials to authenticate directly to the target operating system. It inspects installed software registries, missing patches, and local security configurations with high accuracy while avoiding aggressive exploit traffic that could disrupt server availability.

Step-by-Step Solution

1
Determine authentication requirement
Local system access is needed to accurately verify installed software versions and patch levels.
Unauthenticated network scans only see open network ports and service banners, resulting in potential false positives.
2
Determine scan impact requirement
A non-intrusive scan method must be selected.
Intrusive scanning sends exploit payloads or intensive tests that could crash live application services.

Key Concept

Credentialed vs. Non-Credentialed Vulnerability Scanning
Estimated Time:1m 0s
Rate this question

Topics

Vulnerability Scanning and Assessment

More questions from this topic