Exam CS0-002 topic 1 question 67 discussion

C. Make sure the scan is credentialed, has the latest software and signature versions, *****covers all external hosts in the patch management system****, and is scheduled during off-business hours so it has the least impact on operations. D. Make sure the scan is credentialed, uses a limited plug-in set, ****scans all host IP addresses in the enterprise*****, and is scheduled during off-business hours so it has the least impact on operations. They want to cover all hosts in the Enterprise NOT only external to the patch management system I am going with D

D is correct. To check for a critical patch, only a few plugins are needed to save time and resources. Also the question mentioned, that all systems should be scanned. I am not really sure though, but I think all hosts in the patch management system are not really all hosts in the enterprise. So I am going for D here definitely.

B. Make sure the scan is uncredentialed, covers all hosts in the patch management system, and is scheduled during off-business hours so it has the least impact on operations. Scanning during business hours with a credentialed scan can impact resource availability and potentially cause operational disruptions. An uncredentialed scan can still identify if a system is missing a critical security patch and is less intrusive. Scheduling the scan during off-business hours minimizes the impact on operations. It's also important to ensure that all hosts in the patch management system are covered to ensure comprehensive coverage.

D. Is correct. "..if a critical security patch" = "uses a limited Plug-in set"

d it is

looks good to me

I would like to go fir D as it needs to scan the IPs

I would go for D, as the question pertain to network so it has to scan the IP blocks.

I would go with C since all systems critical path need to be scanned. Limiting some plug ins might leave some vulnerabilities undetected and since this is done during off business hours it is best to utilize all effort See: https://www.tenable.com/blog/4-best-practices-for-credentialed-scanning-with-nessus

C and D appear correct, but "...to determine if a critical security patch was applied to all systems in an enterprise." would imply a limited plug-in sets. Thus D seems to be more correct that C.

I am wondering between C and D but this " uses a limited plugin set " makes me thing actually D might be correct.