Examkin

Question

Difficulty: HardVulnerability Assessment and Security Testing Methods

A security analyst is selecting appropriate security assessment methodologies for an enterprise infrastructure audit. Match each vulnerability assessment and security testing method on the left to its corresponding operational characteristic on the right.

  • Credentialed Vulnerability ScanningUses authenticated local access to inspect operating system configurations, local patch levels, and installed software inventories.
  • Static Application Security Testing (SAST)Evaluates application source code in a non-running state to identify flaws early in the development lifecycle.
  • Dynamic Application Security Testing (DAST)Tests a fully executing application from a black-box perspective by analyzing responses to simulated attack vectors.
  • Passive Infrastructure MonitoringCaptures network traffic telemetry and packet headers to identify active hosts and software signatures without sending active network probes.

Answer

Credentialed Vulnerability Scanning matches authenticated local access inspection; Static Application Security Testing (SAST) matches non-running source code evaluation; Dynamic Application Security Testing (DAST) matches runtime black-box executing application testing; Passive Infrastructure Monitoring matches non-intrusive traffic telemetry capture.
Each vulnerability assessment method is accurately paired with its core function: Credentialed Vulnerability Scanning uses privileged system logins to audit internal configurations and patch statuses; SAST evaluates source code in a non-running state; DAST probes functional applications during runtime from an external perspective; and Passive Infrastructure Monitoring observes network traffic without sending active probes.

Step-by-Step Solution

1
Categorize each methodology by execution state and access level.
Identify whether the testing method evaluates code offline, probes running application endpoints, uses privileged host credentials, or observes network traffic passively.
Security assessment techniques differ fundamentally based on whether they require administrative access, access to source code, active application execution, or packet sniffing capabilities.
2
Pair application security testing techniques (SAST and DAST) to their development phase and testing perspective.
SAST matches non-running source code evaluation (white-box/offline), while DAST matches black-box testing of an executing runtime application.
SAST analyzes static code logic during development, whereas DAST injects payloads into live running web services.
3
Pair infrastructure assessment techniques (Credentialed Scanning and Passive Monitoring) to their probing behavior.
Credentialed scanning matches authenticated host configuration and patch inspection, while passive monitoring matches non-intrusive traffic telemetry capture.
Credentialed scanning uses system privileges to log into endpoints directly, whereas passive monitoring observes traffic without transmitting active network packets.

Key Concept

Vulnerability Assessment and Security Testing Methods
Estimated Time:2m 0s
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic