Examkin

Soru

Zorluk: KolayVulnerability Scanning and Assessment

A cybersecurity analyst is setting up a scheduled vulnerability assessment for production servers. The main requirement is to identify missing patches and misconfigurations without risking system crashes or service outages. Which scanning method should the analyst use?

  1. Non-intrusive vulnerability scanCevap
  2. B
    Intrusive vulnerability scan
  3. C
    Active penetration test
  4. D
    Web application firewall log review

Cevap

The analyst should select a non-intrusive vulnerability scan.
A non-intrusive vulnerability scan identifies security weaknesses, missing patches, and misconfigurations by inspecting version strings and configuration data without attempting to exploit the vulnerabilities. This satisfies the requirement to safely assess systems without taking production services offline.

Adım Adım Çözüm

1
Identify the primary operational constraint in the scenario.
The assessment must assess system security without causing service outages or system instability on production servers.
Production environments require safe testing methods that minimize operational downtime risks.
2
Evaluate scanning techniques against the constraint.
Non-intrusive scans query systems for version information and known flaw indicators without trying to exploit them.
Exploitation attempts are reserved for intrusive scans and penetration testing.
3
Select the appropriate scanning technique.
Choose a non-intrusive vulnerability scan as the safest assessment option.
It fulfills the requirement to identify vulnerabilities safely without risking service interruption.

Anahtar Kavram

Non-intrusive vs. Intrusive Vulnerability Scanning
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru