Match each vulnerability scanning methodology with its most appropriate enterprise operati… — CompTIA Security+

Match each vulnerability scanning methodology with its most appropriate enterprise operational scenario.

Credentialed Vulnerability ScanAuditing local operating system configurations, missing internal software patches, and registry settings with minimal network traffic and high accuracy.
Non-Credentialed Vulnerability ScanMapping exposed network services and unpatched perimeter ports from the perspective of an unauthorized external attacker.
Passive Vulnerability ScanMonitoring live network traffic continuously to identify active hosts and software versions without sending probe packets to fragile operational technology (OT) systems.
Web Application Vulnerability ScanTesting dynamic HTTP/HTTPS form inputs and URL parameters specifically for flaws such as cross-site scripting and SQL injection.

Cevap

Credentialed Vulnerability Scan pairs with auditing local OS configurations and internal patch levels. Non-Credentialed Vulnerability Scan pairs with mapping exposed network services from an external attacker's perspective. Passive Vulnerability Scan pairs with non-intrusively monitoring live network traffic without sending probes. Web Application Vulnerability Scan pairs with testing dynamic HTTP inputs for application-layer flaws such as XSS and SQL injection.

Each vulnerability assessment method fulfills a distinct operational requirement: Credentialed scans provide deep host visibility with low network traffic; Non-Credentialed scans assess exposure from an unauthenticated perspective; Passive scans capture traffic non-intrusively to protect sensitive devices; and Web Application scans specifically exercise web inputs and application logic for web vulnerabilities.

Adım Adım Çözüm

Analyze internal host assessment requirements

Identify that inspecting internal host configurations, software inventories, and local registries accurately requires administrative authentication, matching the Credentialed Vulnerability Scan.

Authenticated access allows direct local checks rather than inferring versions across network ports.

Evaluate perimeter and unauthenticated attack surface requirements

Determine that assessing external risk without authentication credentials simulates an outside attacker, matching the Non-Credentialed Vulnerability Scan.

External attackers initially lack credentials, making unauthenticated port scans the standard model for perimeter visibility.

Assess sensitive operational technology (OT) monitoring constraints

Recognize that fragile or real-time systems cannot tolerate active probe packets, requiring non-intrusive traffic capture, matching the Passive Vulnerability Scan.

Passive scanning relies on packet listening rather than active probe generation, preventing service disruption.

Identify application-layer scanning requirements

Connect dynamic web input testing (such as XSS and SQL injection checks) to specialized Web Application Vulnerability Scans.

Standard network scanners inspect network ports and service headers, whereas web application scanners test HTTP requests, scripts, and database inputs.

Anahtar Kavram

Vulnerability Scanning Methodologies and Operational Scenarios

Tahmini Süre:1m 30s

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular

Bu konudan daha fazla soru