A security team is designing a vulnerability assessment and testing strategy for an enterprise hybrid environment hosting critical financial microservices. The team must satisfy two core requirements: first, obtain granular, host-level visibility into operating system patch levels and local security misconfigurations; second, continuously analyze external runtime exposure without injecting active scan traffic that could disrupt live user transactions or impact service availability. Which of the following security assessment methods should the team implement to meet these operational goals? (Select TWO.)
- Perform credentialed vulnerability scans using dedicated, low-privilege audit service accounts on target servers.Cevap
- Utilize passive network vulnerability monitoring to inspect mirrored network traffic for exposed application banners and software versions.Cevap
- CDeploy an inline high-interaction honeypot within the primary microservices network to filter and drop malicious HTTP traffic.
- DExecute dynamic Cross-Site Scripting (XSS) attack scripts against internal database connection strings to verify backend query parameterization.
- EConfigure perimeter firewall drop logs as the primary detective control for identifying unpatched software vulnerabilities on internal hosts.
Cevap
The team should perform credentialed vulnerability scans using audit accounts and utilize passive network vulnerability monitoring.
Credentialed vulnerability scanning allows internal inspection of host configurations, registry entries, and patch states via authenticated channels with low overhead. Passive network vulnerability monitoring observes network traffic out-of-band without generating active traffic, guaranteeing zero impact on live production transactions.
Adım Adım Çözüm
Anahtar Kavram
Selecting non-disruptive active (credentialed) and passive security assessment methodologies based on operational visibility and availability requirements.
Tahmini Süre:2m 0s