Exam 312-50v12 topic 1 question 54 discussion

B. External assessment ------------------------------------------- Application assessment: It evaluates specific software applications to identify vulnerabilities and weaknesses that could be exploited by attackers. External assessment: It assesses the security of external systems and networks from an external perspective to identify vulnerabilities and security weaknesses. Passive assessment: It evaluates security by monitoring and analyzing network traffic and system behavior without directly interacting with the system. Host-based assessment: It evaluates the security of individual hosts or servers by inspecting their configuration, patches, and security policies.

B. External assessment

B. External assessment -

B. External assessment

B. External assessment

B. External assessment Explanation: The scenario describes a type of vulnerability assessment where a pen tester (Jude) examines a network from a hacker's perspective to identify exploits and vulnerabilities that are accessible to the outside world, such as through firewalls, routers, and servers. This type of assessment is called an external assessment. External assessments are designed to simulate an attack from an external threat actor, such as a hacker or cybercriminal. The focus is on identifying vulnerabilities that are accessible from the Internet, such as open ports, unpatched software, weak passwords, and misconfigured systems. External assessments typically involve a combination of automated scanning tools and manual testing techniques. The objective is to determine the level of security of the corporate network and estimate the threat of network security attacks.