nerdexam
CompTIA

SY0-501 · Question #455

In determining when it may be necessary to perform a credentialed scan against a system instead of a non- credentialed scan, which of the following requirements is MOST likely to influence its…

The correct answer is D. The scanner must be able to audit file system permissions. A credentialed scan is necessary when an in-depth analysis of a system's internal configurations and security settings, beyond network-level vulnerabilities, is required.

Submitted by khalil_dz· Mar 4, 2026Security operations

Question

In determining when it may be necessary to perform a credentialed scan against a system instead of a non- credentialed scan, which of the following requirements is MOST likely to influence its decisions?

Options

  • AThe scanner must be able to enumerate the host OS of devices scanner
  • BThe scanner must be able to footprint the network
  • CThe scanner must be able to check for open ports with listening services
  • DThe scanner must be able to audit file system permissions

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    11% (6)
  • D
    84% (47)

Why each option

A credentialed scan is necessary when an in-depth analysis of a system's internal configurations and security settings, beyond network-level vulnerabilities, is required.

AThe scanner must be able to enumerate the host OS of devices scanner

Enumerating the host OS can often be performed by non-credentialed scans through network-based fingerprinting techniques like banner grabbing or analyzing TCP/IP stack behavior.

BThe scanner must be able to footprint the network

Footprinting the network primarily involves discovering network topology, active devices, and accessible services, which can largely be accomplished through external network probes without system credentials.

CThe scanner must be able to check for open ports with listening services

Checking for open ports with listening services is a fundamental function of network-based, non-credentialed vulnerability scans, as it only requires probing network services without logging into the host.

DThe scanner must be able to audit file system permissionsCorrect

Auditing file system permissions necessitates authenticated access to the target operating system to query and evaluate local security descriptors. This deep level of system access and configuration inspection is a primary distinguishing feature and capability of a credentialed scan over a non-credentialed scan.

Concept tested: Credentialed vs. Non-credentialed Vulnerability Scans

Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment

Topics

#credentialed scanning#vulnerability scanning#file system permissions#security assessment

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice