nerdexam
CompTIA

SY0-501 · Question #202

A vulnerability scanner that uses its running service's access level to better assess vulnerabilities across multiple assets within an organization is performing a:

The correct answer is A. Credentialed scan. A credentialed scan uses supplied credentials or service-level access to authenticate to target systems, enabling deeper visibility into vulnerabilities that unauthenticated scans would miss.

Submitted by katya_ua· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A vulnerability scanner that uses its running service's access level to better assess vulnerabilities across multiple assets within an organization is performing a:

Options

  • ACredentialed scan.
  • BNon-intrusive scan.
  • CPrivilege escalation test.
  • DPassive scan.

How the community answered

(26 responses)
  • A
    77% (20)
  • B
    8% (2)
  • C
    12% (3)
  • D
    4% (1)

Why each option

A credentialed scan uses supplied credentials or service-level access to authenticate to target systems, enabling deeper visibility into vulnerabilities that unauthenticated scans would miss.

ACredentialed scan.Correct

A credentialed scan leverages authenticated access - such as a service account or provided credentials - to log into target systems and inspect installed software, registry settings, patches, and configurations from within. This 'access level' perspective allows the scanner to enumerate vulnerabilities far more accurately than external probing, reducing false negatives across multiple assets in an organization.

BNon-intrusive scan.

A non-intrusive scan refers to a scan that avoids sending potentially disruptive or harmful probes, which is about scan aggressiveness, not about using authenticated access to assess vulnerabilities.

CPrivilege escalation test.

Privilege escalation testing is an active exploitation technique used to gain higher-level permissions than initially granted, not a method of scanning assets using existing service account access.

DPassive scan.

A passive scan involves monitoring network traffic without actively sending probes to targets, which is entirely different from using authenticated credentials to assess systems directly.

Concept tested: Credentialed vs. non-credentialed vulnerability scanning

Source: https://docs.tenable.com/nessus/Content/CredentialedChecksOnWindows.htm

Topics

#credentialed scan#vulnerability scanning#privileged access#asset assessment

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice