Examkin

Soru

Zorluk: KolayVulnerability Scanning and Assessment

A security administrator is preparing to perform a credentialed vulnerability scan on internal application servers. Which of the following represent primary advantages of using a credentialed vulnerability scan instead of an unauthenticated scan? (Select TWO.)

  1. Accurate identification of missing internal software patches and local configuration settingsCevap
  2. Significantly lower rate of false-positive vulnerability findings in scan reportsCevap
  3. C
    Automated exploitation and immediate remediation of identified system flaws
  4. D
    Real-time inline filtering and blocking of malicious network traffic directed at target systems

Cevap

The correct advantages are accurate identification of missing internal software patches and local configuration settings, and a significantly lower rate of false-positive vulnerability findings in scan reports.
Credentialed (authenticated) vulnerability scans log directly into target host systems using administrative credentials. This allows the scanner to query local package management databases, inspect registry configurations, and verify exact software build numbers. As a result, credentialed scans provide precise patch visibility and drastically minimize false positives compared to unauthenticated network scans.

Adım Adım Çözüm

1
Analyze the scanning context and capability requirements
Recognize that credentialed (authenticated) scans operate with administrative access on target operating systems.
Authenticating to target systems enables direct local inspection of host resources, configuration files, and installed software registries.
2
Evaluate the benefits of credentialed access against non-credentialed access
Identify that host-level inspection yields precise patch inventory data and reduces misidentifications (false positives).
Unauthenticated scans rely on external network responses and banner grabbing, which often produce false positives when services conceal exact version information.
3
Distinguish vulnerability assessment functions from active defense and remediation tools
Rule out automatic remediation and inline network traffic blocking.
Assessment scanners focus on discovery and reporting rather than active remediation or inline network filtering.

Anahtar Kavram

Credentialed vs. Unauthenticated Vulnerability Scanning
Tahmini Süre:50s
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru