Study. uk . com
  1. Home
  2. All questions
  3. Question 136

CompTIA Security+ study material · question 136 of 611

A team must assess a fragile industrial network without risking an outage. Which technique fits?

  1. Passive analysis of captured traffic
  2. An aggressive active scan during a maintenance window
  3. A credentialed scan of every device
  4. An exploitation test with rollback
Show the answer

Answer: A. Passive analysis of captured traffic

Passive analysis finds less, but it cannot disturb devices that active probing can knock over.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 4 Target Identification and Analysis Techniques

Challenge yourself on this topic → Study as cards