A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility
over the patch posture of all company’s clients. Which of the following is being used?
A.
Gray box vulnerability testing
B.
Passive scan
C.
Credentialed scan
D.
Bypassing security controls
Explanation:
Credentialed scan: Here’s an analogy: traditional vulnerability scanning is like a mechanic evaluating a car just by looking at the outside and listening to
the motor run. It’s useful but there is so much more information available by looking under the hood and plugging into the on-board diagnostics. That level of insight
and internal perspective is what credentialed scanning lends to a security assessment.