A security administrator wants to perform routine tests on the network during working hours
when certain applications are being accessed by the most people. Which of the following
would allow the security administrator to test the lack of security controls for those
applications with the least impact to the system?
A.
Penetration test
B.
Vulnerability scan
C.
Load testing
D.
Port scanner
I do not understand why the correct answer is ‘Vulnerability Scan.’ According to the question it is asking:
“Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system?”
With ‘test’ being the key word. Penetration testing allows you to ‘TEST’ the lack of security control, while a vulnerability scan just identifies the lack of security controls.
Can anyone explain to me why the correct answer is ‘Vulnerability Scan?’
0
0
Yes, the question stated that “during working hours” and the “least impact to the system”
A scan would provide that. A scan is just a scan, it doesn’t affect anything. These questions can be tricky, has to read them a couple of times.
0
0