CISA · Question #68
Which of the following is the GREATEST advantage of vulnerability scanning over penetration testing?
The correct answer is A. The testing process can be automated to cover large groups of assets. The greatest advantage of vulnerability scanning over penetration testing is its ability to be largely automated, enabling efficient coverage of a large number of assets.
Question
Which of the following is the GREATEST advantage of vulnerability scanning over penetration testing?
Options
- AThe testing process can be automated to cover large groups of assets
- BThe testing produces a lower number of false positive results
- CCustom-developed applications can be tested more accurately
- DNetwork bandwidth is utilized more efficiently
How the community answered
(35 responses)- A89% (31)
- B3% (1)
- C6% (2)
- D3% (1)
Why each option
The greatest advantage of vulnerability scanning over penetration testing is its ability to be largely automated, enabling efficient coverage of a large number of assets.
Vulnerability scanners are automated tools that can quickly identify known vulnerabilities across many systems, networks, and applications without significant human intervention, making them scalable and cost-effective for large-scale and frequent assessments. In contrast, penetration testing is a more manual, in-depth process targeting specific systems, requiring skilled human testers and substantial time.
Vulnerability scanning typically produces a *higher* number of false positives compared to penetration testing, which, being human-driven, can better distinguish exploitable vulnerabilities from benign findings.
Concept tested: Vulnerability scanning vs. penetration testing
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing-vulnerability-assessment
Topics
Community Discussion
No community discussion yet for this question.