Which vulnerability assessment method uses login credentials to perform a deeper, more informative audit of a network?

Which vulnerability assessment method uses login credentials to perform a deeper, more informative audit of a network?

• A. Non-credentialed scan
• B. Credentialed scan
• C. APT assessment
• D. Community scan

Answer: (B)

Credentialed scanning lets the scanner log into systems so it can audit from an authenticated perspective. With valid credentials, it can see what's actually configured on hosts, verify patch levels, check security settings, assess user permissions, and inventory installed software and services. This deeper access reveals issues that aren’t visible from an outside, unauthenticated view—like patch gaps on internal machines or local policy misconfigurations. Non-credentialed scans, by contrast, can only observe what’s exposed publicly and cannot verify internal configurations. An APT assessment targets advanced threat scenarios and attacker techniques, not specifically the depth gained from authenticated access. A community scan relies on publicly shared vulnerability data and typically doesn’t involve authenticated access to internal systems. So using login credentials to perform a deeper, more informative audit is the credentialed scan.

Credentialed scanning lets the scanner log into systems so it can audit from an authenticated perspective. With valid credentials, it can see what's actually configured on hosts, verify patch levels, check security settings, assess user permissions, and inventory installed software and services. This deeper access reveals issues that aren’t visible from an outside, unauthenticated view—like patch gaps on internal machines or local policy misconfigurations. Non-credentialed scans, by contrast, can only observe what’s exposed publicly and cannot verify internal configurations. An APT assessment targets advanced threat scenarios and attacker techniques, not specifically the depth gained from authenticated access. A community scan relies on publicly shared vulnerability data and typically doesn’t involve authenticated access to internal systems. So using login credentials to perform a deeper, more informative audit is the credentialed scan.