Examkin

Soru

Zorluk: KolayVulnerability Assessment and Security Testing Methods

An administrator needs to perform a vulnerability scan on internal servers to accurately detect missing software patches without installing host software agents. Which of the following scanning methods should the administrator use?

  1. Credentialed vulnerability scanCevap
  2. B
    Non-credentialed vulnerability scan
  3. C
    Passive network traffic inspection
  4. D
    Inline honeypot service deployment

Cevap

Credentialed vulnerability scan
A credentialed vulnerability scan allows the scanner to log into target hosts using valid permissions to inspect installed applications, registry keys, and operating system patch levels directly. This provides high accuracy and low false-positive rates without requiring permanent agent installations.

Adım Adım Çözüm

1
Identify the assessment objective
The administrator must verify internal missing software patches accurately across servers without installing local agents.
Accurate patch auditing requires permission to inspect system registries and installed software databases.
2
Compare assessment methods
A credentialed scan provides authenticated remote access to query system configuration and missing patches directly.
Unauthenticated or passive methods only see open ports and exposed services, leading to incomplete results.

Anahtar Kavram

Credentialed vs. Non-Credentialed Vulnerability Scanning
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Vulnerability Assessment and Security Testing Methods

Bu konudan daha fazla soru