A systems administrator is configuring a cloud solution for a vulnerability assessment to test the company's resources that are hosted in a public cloud. The solution must test the company's resources

An agent-based scan requires software installed directly on the target host, providing an internal host-level perspective rather than simulating an external attacker.

A network-based scan operates externally across the network, probing target systems exactly as an outside attacker would see them. This approach requires no credentials or installed agents, making it the best fit for assessing publicly exposed cloud resources from an external user's perspective and revealing internet-facing vulnerabilities.

A port scan only identifies open ports and listening services; it does not perform a full vulnerability assessment of the discovered services.

A credentialed scan uses valid login credentials to assess systems from an authenticated, internal perspective, which is the opposite of an external user's viewpoint.