Examkin

Soru

Zorluk: OrtaVulnerability Scanning and Assessment

Match each organizational vulnerability assessment requirement to the most appropriate scan configuration method.

  • Evaluating perimeter security posture and exposed services from an unauthenticated external adversary's perspectiveNon-credentialed external network vulnerability scan
  • Auditing internal server patch levels and local registry configurations with high accuracy and minimal network bandwidth overheadCredentialed network vulnerability scan
  • Maintaining continuous software vulnerability visibility for roaming remote worker laptops without requiring a VPN connectionAgent-based vulnerability scan
  • Enumerate active host IP addresses and open network ports across a newly acquired subnet prior to conducting detailed assessmentsNetwork discovery scan (ping sweep / port scan)

Cevap

1. Evaluating perimeter security from an unauthenticated adversary perspective matches Non-credentialed external network vulnerability scan.
2. Auditing internal patch levels and registry configurations with minimal bandwidth matches Credentialed network vulnerability scan.
3. Continuous vulnerability visibility for roaming laptops without VPN matches Agent-based vulnerability scan.
4. Enumerating active host IP addresses and open ports across a subnet matches Network discovery scan.
Each vulnerability scanning approach serves a distinct operational purpose: non-credentialed external scans evaluate perimeter risk from an attacker's perspective; credentialed network scans deliver low-impact, high-accuracy internal patch audits; host-based agents ensure continuous compliance for remote assets outside the network perimeter; and discovery scans rapidly map network topology and active hosts.

Adım Adım Çözüm

1
Analyze the operational location, authentication requirements, and goal for each assessment scenario.
Identified four unique deployment requirements: unauthenticated external probing, authenticated internal audit, off-network continuous monitoring, and asset discovery.
Vulnerability scanning methods differ primarily by authentication level, host proximity/deployment model, and depth of analysis.
2
Map external probing without credentials to non-credentialed external scans.
Requirement 1 correctly pairs with Non-credentialed external network vulnerability scan.
This mode accurately mimics an external threat actor's vantage point on public-facing assets.
3
Map internal patch verification requiring low network impact to credentialed network scans.
Requirement 2 correctly pairs with Credentialed network vulnerability scan.
Authentication allows scanner access to inspect administrative logs, registries, and configuration files directly.
4
Map remote roaming endpoints to host agents, and subnet host mapping to discovery scans.
Requirement 3 pairs with Agent-based scan; Requirement 4 pairs with Network discovery scan.
Agents provide persistent endpoints monitoring independent of network location, whereas discovery scans rapidly enumerate host availability and ports.

Anahtar Kavram

Vulnerability Assessment Scanner Methods and Configurations
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru