Study. uk . com
  1. Home
  2. All questions
  3. Question 135

CompTIA Security+ study material · question 135 of 611

Which scan type best measures what an outside attacker would see of an organisation's internet-facing estate?

  1. An unauthenticated external scan
  2. A software composition analysis
  3. A credentialed internal scan
  4. A configuration examination
Show the answer

Answer: A. An unauthenticated external scan

An unauthenticated scan approximates the attacker's view, which is the right tool for exposure rather than patch compliance.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 4.3 Vulnerability Scanning

Challenge yourself on this topic → Study as cards