CS0-003 Security Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Scan with default credentials

  Why it's wrong here

  Scanning with default credentials relies on factory-set usernames and passwords, which only identifies whether those specific defaults remain active. It does not grant the comprehensive administrative access required to audit local registry keys, installed software patches, or deep system configurations. Furthermore, relying on default credentials poses a severe security risk and does not represent a structured, authenticated vulnerability assessment methodology.

• ✗

  Non-credentialed scan

  Why it's wrong here

  A non-credentialed scan inspects the target from the perspective of an unauthenticated outsider, analyzing open ports, banners, and exposed network services. Because it lacks local system access, it cannot inspect the local registry, file system permissions, or missing software patches. This approach results in a high rate of false negatives for internal vulnerabilities that are not exposed directly to the network.

• ✓

  Agent-based scan

  Why this is correct

  Agent-based scans utilize a lightweight software package installed directly on the target endpoint to perform local, authenticated assessments. This method eliminates the need to manage network credentials or open inbound ports, allowing the agent to execute with local system privileges. It is highly effective for transient assets, such as remote laptops, which may not be consistently connected to the corporate network during scheduled network scans.

• ✗

  External scan

  Why it's wrong here

  External scans originate from outside the network perimeter to evaluate the organization's public-facing attack surface, such as firewalls and public IP addresses. They are incapable of bypassing perimeter defenses to perform deep, authenticated internal audits of endpoint operating systems. Consequently, they cannot provide visibility into local software vulnerabilities, misconfigured internal services, or registry-level security gaps.

• ✓

  Credentialed scan

  Why this is correct

  Credentialed scans use provided administrative or user-level credentials to log into target systems over the network, allowing the scanner to perform deep, authenticated audits. This approach enables the scanner to query the registry, inspect the file system, and verify installed patches without installing local software. While highly thorough, it requires robust credential management and network connectivity between the scanner and the target.

Go deeper

Related to this question