SY0-501 · Question #202
A vulnerability scanner that uses its running service's access level to better assess vulnerabilities across multiple assets within an organization is performing a:
The correct answer is A. Credentialed scan. A credentialed scan uses supplied credentials or service-level access to authenticate to target systems, enabling deeper visibility into vulnerabilities that unauthenticated scans would miss.
Question
A vulnerability scanner that uses its running service's access level to better assess vulnerabilities across multiple assets within an organization is performing a:
Options
- ACredentialed scan.
- BNon-intrusive scan.
- CPrivilege escalation test.
- DPassive scan.
How the community answered
(26 responses)- A77% (20)
- B8% (2)
- C12% (3)
- D4% (1)
Why each option
A credentialed scan uses supplied credentials or service-level access to authenticate to target systems, enabling deeper visibility into vulnerabilities that unauthenticated scans would miss.
A credentialed scan leverages authenticated access - such as a service account or provided credentials - to log into target systems and inspect installed software, registry settings, patches, and configurations from within. This 'access level' perspective allows the scanner to enumerate vulnerabilities far more accurately than external probing, reducing false negatives across multiple assets in an organization.
A non-intrusive scan refers to a scan that avoids sending potentially disruptive or harmful probes, which is about scan aggressiveness, not about using authenticated access to assess vulnerabilities.
Privilege escalation testing is an active exploitation technique used to gain higher-level permissions than initially granted, not a method of scanning assets using existing service account access.
A passive scan involves monitoring network traffic without actively sending probes to targets, which is entirely different from using authenticated credentials to assess systems directly.
Concept tested: Credentialed vs. non-credentialed vulnerability scanning
Source: https://docs.tenable.com/nessus/Content/CredentialedChecksOnWindows.htm
Topics
Community Discussion
No community discussion yet for this question.