A security administrator needs to perform a routine vulnerability scan on a critical production database server during business hours. The administrator must maximize detection accuracy for missing operating system patches while ensuring database availability is not impacted. Which of the following scanning practices should the administrator select? (Select TWO.)
- Perform a credentialed scan using administrative account privilegesCevap
- Configure the scanner to use non-intrusive scan optionsCevap
- CEnable automated exploit verification scripts to validate identified vulnerabilities
- DDeploy inline packet-filtering firewalls to automatically remediate application-layer vulnerabilities
Cevap
The administrator should perform a credentialed scan using administrative account privileges and configure the scanner to use non-intrusive scan options.
Selecting credentialed scanning enables the vulnerability scanner to log into the host and accurately read installed patches and system configurations with minimal network overhead. Pairing this with non-intrusive scan settings ensures the scanner only checks system state against known vulnerability signatures without executing potentially destabilizing exploit code on production systems.
Adım Adım Çözüm
Anahtar Kavram
Credentialed vs. Non-Intrusive Vulnerability Scanning Configuration