Examkin

Soru

Zorluk: Çok zorVulnerability Scanning and Assessment

A security operations team observes significant network degradation and inconsistent scan results during scheduled vulnerability assessments of an enterprise auto-scaling container cluster. The current scanning infrastructure relies on a centralized network scanner initiating remote, credentialed SSH/WinRM connections across dynamically assigned pod IP addresses, frequently failing when transient instances terminate mid-scan. Which architectural modification best resolves these operational scanning challenges while minimizing privileged credential transmission across the internal network?

  1. Deploy agent-based vulnerability monitoring integrated directly into baseline container images to report local software inventory and system state changes asynchronously.Cevap
  2. B
    Reconfigure the central scanner to execute non-credentialed intrusive port scans and banner grabbing across the dynamic container subnet ranges.
  3. C
    Implement an inline Web Application Firewall to monitor transient pod traffic and dynamically generate vulnerability assessment findings based on network packet signatures.
  4. D
    Inject synthetic SQL injection and client-side payload tests into active network scans to validate whether transient instance failures stem from application software flaws.

Cevap

Deploying agent-based vulnerability monitoring directly within baseline container images resolves host discovery and performance issues in auto-scaling, ephemeral environments.
Deploying agent-based vulnerability scanners into baseline container images provides continuous visibility into ephemeral microservices without relying on persistent network connections or remote SSH/WinRM credential authentication. Agents execute locally, consume minimal system resources, and push telemetry to a centralized console asynchronously, eliminating scan failures caused by container termination during active scans.

Adım Adım Çözüm

1
Analyze the operational constraints and failure points in the current vulnerability scanning architecture.
Identified that centralized credentialed network scanning creates network overhead and fails when ephemeral container instances terminate before scans finish.
Centralized network scans depend on stable IP addresses and persistent network sessions.
2
Evaluate scanning methodologies against dynamic and auto-scaling cloud workload requirements.
Agent-based scanning operates locally on the target host/container, executing checks without requiring active remote network sessions or inbound SSH/WinRM credentials.
Local agents collect state telemetry and push findings asynchronously, making them ideal for dynamic, short-lived infrastructure.
3
Select the option that eliminates network overhead and handles transient instance lifecycles while maintaining high vulnerability discovery fidelity.
Deploying agents into container base images provides continuous, low-overhead visibility regardless of IP changes or container lifespan.
Agent-based assessment eliminates remote credential transmission across the network while delivering complete local package inspection.

Anahtar Kavram

Agent-Based vs. Network-Based Vulnerability Scanning in Ephemeral Environments
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru