Examkin

Soru

Zorluk: OrtaVulnerability Scanning and Assessment

A security engineering team is refining the vulnerability assessment strategy for a hybrid cloud environment. The team wants to obtain detailed patch and configuration status from cloud virtual machines while minimizing network bandwidth overhead and avoiding the transmission of privileged domain credentials across the network. Which TWO of the following configurations or approaches should the team implement? (Select TWO.)

  1. Deploy host-based vulnerability scanner agents directly onto the virtual machines to conduct local authenticated assessments.Cevap
  2. Leverage cloud API integration to perform offline disk snapshot and image vulnerability assessments.Cevap
  3. C
    Configure perimeter web application firewalls to rewrite incoming database queries during active vulnerability scans.
  4. D
    Deploy inline honeypots within target subnets to block and divert scanner probes from reaching production operating systems.

Cevap

The security team should deploy host-based scanner agents onto the virtual machines and leverage cloud API integration for offline disk snapshot assessments.
Deploying host-based vulnerability scanner agents directly on targets allows local execution without transmitting privileged credentials over the network or incurring heavy network scan traffic. Additionally, leveraging cloud API integration for offline disk snapshot scanning allows out-of-band analysis of host filesystems without impacting running workloads or needing network probes.

Adım Adım Çözüm

1
Analyze requirements for zero network credential transmission and minimal network bandwidth overhead.
Identify that traditional remote network scans with elevated credentials expose network traffic and introduce significant overhead.
Host-based agents execute assessments locally, eliminating the need to transmit administrative credentials over the wire and drastically reducing network bandwidth consumption.
2
Evaluate cloud-native vulnerability assessment capabilities.
Determine that out-of-band snapshot scanning using cloud management APIs provides comprehensive visibility into OS vulnerabilities.
API-driven snapshot inspection assesses virtual machine disks without interacting with active production network interfaces or running live network probes.

Anahtar Kavram

Credentialed vulnerability assessment methods using host agents and cloud API integration
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru