Jude, a pen tester, examined a network from a hacker's perspective to identify exploits and vulnerabilities accessible to the outside world by using devices such as firewalls, routers, and servers. In this process, he also estimated the threat of network security attacks and determined the level of security of the corporate network. What is the type of vulnerability assessment that Jude performed on the organization?

Question

Accepted Answer

A. External assessment An external vulnerability assessment examines the network strictly from an outside attacker's perspective, focusing on externally facing assets such as firewalls, routers, and servers. It identifies exploitable vulnerabilities accessible to the outside world and estimates the threat posed by external network attacks. This matches Jude's activity of analyzing perimeter defenses to determine the corporate network's overall security posture.

Answer

B. Passive assessment A passive assessment involves only monitoring and analyzing existing network traffic without actively probing or sending crafted packets to target systems.

Answer

C. A Host-based assessment A host-based assessment focuses on the security configuration and vulnerabilities of individual host systems rather than the organization's network perimeter.

Answer

D. Application assessment An application assessment focuses specifically on identifying vulnerabilities within software applications rather than evaluating the broader network infrastructure and perimeter devices.

Jude, a pen tester, examined a network from a hacker's perspective to identify exploits and vulnerabilities accessible to the outside world by using devices such as firewalls, routers, and servers…

Question

Options

How the community answered

Why each option

Topics

Community Discussion