A security analyst is designing a vulnerability assessment strategy for an enterprise environment that includes both ephemeral cloud virtual machines that dynamically auto-scale and legacy operational technology (OT) controllers that are susceptible to crashing under heavy active network traffic. Which deployment model best provides comprehensive vulnerability visibility while minimizing operational risk and disruption across both asset types?
- Deploy lightweight host-based scan agents on the cloud virtual machines and implement passive network vulnerability monitoring for the legacy operational technology controllers.Cevap
- BExecute high-frequency active credentialed network scans against both cloud virtual machines and legacy operational technology controllers using a centralized scanner.
- CConfigure an inline intrusion prevention system (IPS) to automatically remediate vulnerabilities across cloud instances and legacy operational technology systems.
- DConduct continuous unauthenticated external scans against management interfaces across all cloud and legacy operational technology assets.
Cevap
Deploying lightweight host-based scan agents on cloud virtual machines and implementing passive network vulnerability monitoring for legacy operational technology controllers provides full visibility while respecting operational constraints.
Host-based scan agents are ideal for short-lived, dynamically scaling cloud virtual machines because they execute locally and report state to a management console regardless of network IP changes. Passive network vulnerability monitoring collects network traffic without transmitting active probes, making it safe for delicate legacy OT systems that could malfunction when actively scanned.
Adım Adım Çözüm
Anahtar Kavram
Selecting appropriate vulnerability scanning methodologies (agent-based vs. passive network monitoring) based on target asset characteristics and operational risk profiles.