A security analyst is attempting to configure a vulnerability scan for a new segment on the network. Given the requirement to prevent credentials from traversing the

network while still conducting a credentialed scan, which of the following is the BEST choice?

A. Install agents on the endpoints to perform the scan

B. Provide each endpoint with vulnerability scanner credentials

C. Encrypt all of the traffic between the

scanner and the endpoint

D. Deploy scanners with administrator privileges on each endpoint