A security administrator is tasked with modifying the vulnerability scan process to reduce the network traffic but maintain thorough checks. Which of the following scanning approaches should be implem

Question

Options

• ACredentialed scans
• BIndividual scans
• CSecurity baseline scans
• DAgent-based scans

• A
  6% (2)
• B
  14% (5)
• C
  3% (1)
• D
  78% (28)

Explanation

Agent-based scanning (D) is correct because agents are installed directly on each target host and perform scans locally, sending only the results back to the central server rather than generating heavy network traffic from remote probes - this maintains thorough vulnerability checks while significantly reducing network overhead.

Why the others are wrong:

• (A) Credentialed scans use valid login credentials to perform deeper remote scans, but the scanner still communicates extensively across the network to each target, which does not reduce traffic.
• (B) Individual scans simply means scanning one host at a time rather than in bulk; while this staggers traffic, it doesn't fundamentally reduce the total network load.
• (C) Security baseline scans compare configurations against a known-good standard, but they are still typically performed remotely and don't inherently minimize network traffic.

Memory Tip: Think of agent-based scanning like having a personal doctor in your house - instead of traveling to a clinic (network traffic), the doctor examines you locally and just sends a report. The key phrase to remember is "local execution, minimal traffic." On the exam, whenever you see "reduce network traffic + thorough scanning," think agent = local = low traffic.

No community discussion yet for this question.