A security analyst has been tasked with evaluating an enterprise web application server to identify missing software patches, unsecure configurations, and known system weaknesses. The organization requires that the assessment identify specific vulnerability details without attempting system exploitation or causing service disruption to production users. Which of the following security assessment methods should the analyst execute to fulfill these requirements?
- A credentialed, non-intrusive vulnerability scanAnswer
- BA honeypot deployment designed to filter and block active exploitation attempts targeting application services
- CAn update to host-based firewall rules to prevent memory buffer overflow vulnerabilities in application code
- DAn automated web application assessment that injects client-side script tags to query backend database tables
Answer
A credentialed, non-intrusive vulnerability scan is the correct methodology because it safely inspects system configurations and patch levels under authenticated context without attempting intrusive exploits.
Executing a credentialed, non-intrusive vulnerability scan allows the analyst to inspect local patch levels and misconfigurations using valid system credentials. Because the scan is non-intrusive, it refrains from executing active exploitation routines, fulfilling the management requirement to avoid disruption to production availability.
Step-by-Step Solution
Key Concept
Credentialed vs Non-Intrusive Vulnerability Assessment Methods