Match each vulnerability scanning concept on the left with its corresponding operational description on the right.
- Credentialed ScanUses administrative log-in privileges to perform deep host-level inspection of patches and settings.
- Non-Credentialed ScanProbes targets without system log-in credentials to identify externally exposed services.
- Passive ScanObserves and analyzes existing network traffic without sending probes to target systems.
- Intrusive ScanExecutes active verification scripts that risk causing system instability or service disruption.
Cevap
Credentialed Scan pairs with using administrative privileges for internal inspection; Non-Credentialed Scan pairs with probing target services without log-in credentials; Passive Scan pairs with observing network traffic without sending probes; Intrusive Scan pairs with executing active verification scripts that risk disrupting system stability.
Each scanning technique directly aligns with its specific operational characteristic: credentialed scans log in locally, non-credentialed scans probe externally without authentication, passive scans sniff network traffic without transmitting packets, and intrusive scans run verification checks that may disrupt target services.
Adım Adım Çözüm
Anahtar Kavram
Vulnerability assessment tools vary by privilege level (credentialed vs. non-credentialed) and network impact (passive vs. intrusive).