Examkin

Soru

Zorluk: KolayVulnerability Scanning and Assessment

A security technician needs to conduct a vulnerability scan on an internal application server to accurately identify missing software patches and internal misconfigurations without disrupting active services. Which of the following scanning approaches best satisfies these requirements?

  1. Credentialed, non-intrusive scanCevap
  2. B
    Non-credentialed, intrusive scan
  3. C
    External penetration test
  4. D
    Passive network monitoring

Cevap

Credentialed, non-intrusive scan
A credentialed, non-intrusive scan uses valid system credentials to authenticate directly to the target operating system. It inspects installed software registries, missing patches, and local security configurations with high accuracy while avoiding aggressive exploit traffic that could disrupt server availability.

Adım Adım Çözüm

1
Determine authentication requirement
Local system access is needed to accurately verify installed software versions and patch levels.
Unauthenticated network scans only see open network ports and service banners, resulting in potential false positives.
2
Determine scan impact requirement
A non-intrusive scan method must be selected.
Intrusive scanning sends exploit payloads or intensive tests that could crash live application services.

Anahtar Kavram

Credentialed vs. Non-Credentialed Vulnerability Scanning
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Vulnerability Scanning and Assessment

Bu konudan daha fazla soru