Match each vulnerability scanning concept on the left with its corresponding operational description on the right.
- Credentialed ScanUses administrative log-in privileges to perform deep host-level inspection of patches and settings.
- Non-Credentialed ScanProbes targets without system log-in credentials to identify externally exposed services.
- Passive ScanObserves and analyzes existing network traffic without sending probes to target systems.
- Intrusive ScanExecutes active verification scripts that risk causing system instability or service disruption.
Answer
Credentialed Scan pairs with using administrative privileges for internal inspection; Non-Credentialed Scan pairs with probing target services without log-in credentials; Passive Scan pairs with observing network traffic without sending probes; Intrusive Scan pairs with executing active verification scripts that risk disrupting system stability.
Each scanning technique directly aligns with its specific operational characteristic: credentialed scans log in locally, non-credentialed scans probe externally without authentication, passive scans sniff network traffic without transmitting packets, and intrusive scans run verification checks that may disrupt target services.
Step-by-Step Solution
Key Concept
Vulnerability assessment tools vary by privilege level (credentialed vs. non-credentialed) and network impact (passive vs. intrusive).