SK0-004 · Question #669
A company hires a third-party vendor to perform a vulnerability scan of the network from outside the network. Which of the following pieces of information will be included in the scan results?…
The correct answer is A. List of open ports B. List of OS patches to install. An external vulnerability scan probes the network perimeter without credentials and can identify network-visible data such as open ports and missing OS patches, but cannot access internal host-level details.
Question
A company hires a third-party vendor to perform a vulnerability scan of the network from outside the network. Which of the following pieces of information will be included in the scan results? (Choose two.)
Options
- AList of open ports
- BList of OS patches to install
- CDate of installed virus definitions
- DList of server BIOS passwords
- EList of firmware versions
How the community answered
(15 responses)- A73% (11)
- C7% (1)
- D13% (2)
- E7% (1)
Why each option
An external vulnerability scan probes the network perimeter without credentials and can identify network-visible data such as open ports and missing OS patches, but cannot access internal host-level details.
External scanners actively probe target IP ranges and enumerate open TCP and UDP ports, which are visible at the network perimeter without any authentication.
Vulnerability scanners correlate detected service banners and version strings against CVE databases to identify unpatched software and recommend specific OS updates.
Antivirus definition dates are stored internally on the host and are not exposed to unauthenticated external network probes.
BIOS passwords are firmware-level credentials that are completely inaccessible to any network-based scan regardless of scan origin.
Firmware version details for internal components are not broadcast over the network and are not detectable by an unauthenticated external scan.
Concept tested: Scope and results of external vulnerability scanning
Source: https://www.cisa.gov/resources-tools/services/vulnerability-scanning
Topics
Community Discussion
No community discussion yet for this question.