A vulnerability scan is being conducted against a desktop system. The scan is looking for files, versions, and registry values known to be associated with system vulnerabilities. Which of the…

A non-intrusive scan gathers information without exploiting vulnerabilities or making changes, but it doesn't specify the level of access (internal vs. external) required to inspect files or registry values.

While a credentialed scan is by definition an authenticated scan, 'credentialed' is the more specific term used in vulnerability scanning to denote logging into the operating system for deep internal inspection as described.

A credentialed scan involves providing the vulnerability scanner with valid administrative credentials to log into the target system. This access allows the scanner to perform an in-depth analysis of the system's internal configuration, including installed software versions, file system contents, and specific registry values, which is necessary to identify vulnerabilities based on these details.

An active scan directly interacts with the target system to enumerate services or check for vulnerabilities, but it doesn't specifically describe the method (e.g., using credentials) to gain deep internal access for file and registry inspection.