Which type of scan is capable of running local checks?

Which type of scan is capable of running local checks?

• A. Credentialled
• B. Uncredentialled
• C. Passive
• D. Remote

Answer: (A)

The credentialed scan is capable of running local checks because it utilizes valid user credentials to gain deeper access to systems during the scanning process. This allows the scan to perform an extensive analysis, including checking system configurations, installed software, and active vulnerabilities that might not be visible from an external perspective. By having the necessary permissions, the credentialed scan can interact with the operating system and retrieve a comprehensive view of the system's security posture, leading to a more accurate assessment of vulnerabilities and compliance with security policies. Other scanning types, while useful in their own right, do not provide the same depth of insight. Uncredentialed scans operate from an outsider's perspective, assessing only what is externally visible and potentially missing critical vulnerabilities present internally. Passive scans monitor network traffic without actively probing systems, thereby lacking the capability to perform in-depth local checks. Remote scans, similar to uncredentialed scans, are conducted from a distance and do not leverage internal credentials to assess systems directly. Therefore, credentialed scans are invaluable for their ability to authenticate and perform detailed evaluations necessary for comprehensive security assessments.

The credentialed scan is capable of running local checks because it utilizes valid user credentials to gain deeper access to systems during the scanning process. This allows the scan to perform an extensive analysis, including checking system configurations, installed software, and active vulnerabilities that might not be visible from an external perspective. By having the necessary permissions, the credentialed scan can interact with the operating system and retrieve a comprehensive view of the system's security posture, leading to a more accurate assessment of vulnerabilities and compliance with security policies.

Other scanning types, while useful in their own right, do not provide the same depth of insight. Uncredentialed scans operate from an outsider's perspective, assessing only what is externally visible and potentially missing critical vulnerabilities present internally. Passive scans monitor network traffic without actively probing systems, thereby lacking the capability to perform in-depth local checks. Remote scans, similar to uncredentialed scans, are conducted from a distance and do not leverage internal credentials to assess systems directly. Therefore, credentialed scans are invaluable for their ability to authenticate and perform detailed evaluations necessary for comprehensive security assessments.