Examkin

Soru

Zorluk: KolayVulnerability Assessment and Security Testing Methods

A cybersecurity analyst needs to assess internal enterprise servers for missing software security patches and configuration flaws without sending intrusive exploit payloads or generating heavy network traffic across the subnet. Which of the following vulnerability assessment methods should the analyst perform?

  1. A credentialed vulnerability scanCevap
  2. B
    An inline honeypot deployment to intercept probe traffic
  3. C
    A perimeter firewall rule adjustment to block scan ports
  4. D
    A Cross-Site Scripting (XSS) payload sweep against database ports

Cevap

The analyst should perform a credentialed vulnerability scan.
A credentialed vulnerability scan uses valid system credentials to authenticate directly onto host systems. This permits the scan engine to inspect internal registry keys, patch management records, and software configurations with minimal network bandwidth usage and without executing invasive attack probes.

Adım Adım Çözüm

1
Analyze the operational requirements
The assessment must identify missing patches and local configuration flaws while avoiding high network overhead and intrusive probes.
Uncredentialed scans rely on network-based probes that generate high traffic and can miss internal configuration flaws.
2
Select the appropriate scanning methodology
A credentialed scan authenticates locally on the host to read configuration settings and patch status directly.
Authenticating locally minimizes network footprint and provides accurate inventory without executing intrusive exploits.

Anahtar Kavram

Credentialed Vulnerability Scanning
Tahmini Süre:50s
Bu soruyu puanla

Konular

Vulnerability Assessment and Security Testing Methods

Bu konudan daha fazla soru