nerdexam
EC-Council

312-50V12 · Question #219

A large e-commerce organization is planning to implement a vulnerability assessment solution to enhance its security posture. They require a solution that imitates the outside view of attackers…

The correct answer is A. Inference-based assessment solution. The question asks which vulnerability assessment solution best meets all listed requirements: attacker's perspective, inference-based testing, auto-scanning against updated databases, and multi-network support. An inference-based assessment solution directly satisfies all these…

Submitted by kevin_r· Mar 4, 2026Reconnaissance Techniques

Question

A large e-commerce organization is planning to implement a vulnerability assessment solution to enhance its security posture. They require a solution that imitates the outside view of attackers, performs well-organized inference-based testing, scans automatically against continuously updated databases, and supports multiple networks. Given these requirements, which type of vulnerability assessment solution would be most appropriate?

Options

  • AInference-based assessment solution
  • BTree-based assessment approach
  • CProduct-based solution installed on a private network
  • DService-based solution offered by an auditing firm

How the community answered

(20 responses)
  • A
    75% (15)
  • B
    5% (1)
  • C
    15% (3)
  • D
    5% (1)

Why each option

The question asks which vulnerability assessment solution best meets all listed requirements: attacker's perspective, inference-based testing, auto-scanning against updated databases, and multi-network support. An inference-based assessment solution directly satisfies all these criteria.

AInference-based assessment solutionCorrect

An inference-based assessment solution is specifically designed to mimic an external attacker's perspective by performing systematic, logic-driven testing that infers vulnerabilities based on service responses and behavior. It supports automated scanning against continuously updated vulnerability databases and can operate across multiple networks, making it the best fit for all stated requirements simultaneously.

BTree-based assessment approach

A tree-based assessment approach refers to a structured decision-tree methodology for mapping attack paths, but it does not inherently support automated scanning against updated databases or imitate the outside attacker's view as comprehensively as an inference-based solution.

CProduct-based solution installed on a private network

A product-based solution installed on a private network is limited to scanning the internal network it resides on, which conflicts with the requirement to support multiple networks and imitate the external attacker's perspective.

DService-based solution offered by an auditing firm

A service-based solution offered by an auditing firm provides third-party assessments but is typically periodic, not continuously automated, and does not inherently perform inference-based testing or scan against continuously updated databases in the manner described.

Concept tested: Types of vulnerability assessment solutions and their characteristics

Source: https://www.nist.gov/publications/technical-guide-information-security-testing-and-assessment

Topics

#Vulnerability assessment#Inference-based scanning#Automated scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice