Following an enterprise-wide remediation effort to patch critical remote code execution vulnerabilities across multiple database servers, a security analyst must confirm that all identified flaws have been successfully resolved. To complete this verification efficiently without causing unnecessary network overhead or waiting for a complete multi-subnet scan cycle, which of the following scanning approaches should the analyst execute?
- Execute a targeted differential scan scoped specifically to the previously affected assets and CVE identifiers.Cevap
- BConfigure inline firewall rules to block inbound network access to the database ports instead of verifying patch installation.
- CDeploy web application firewall rules configured to filter cross-site scripting payloads across the internal server subnet.
- DDeploy an intrusion detection system as a detective security control to replace scheduled follow-up vulnerability assessments.
Cevap
Execute a targeted differential scan scoped specifically to the previously affected assets and CVE identifiers.
Executing a targeted differential scan (also known as a remediation scan) allows security analysts to re-assess only the specific hosts and vulnerabilities identified in prior reports. This approach directly validates patch deployment success while minimizing scan duration and network resource consumption.
Adım Adım Çözüm
Anahtar Kavram
Remediation and Differential Vulnerability Scanning