Question

how can a configuration review reduce the impact of a vulnerability scan on the networks overall performance?
it performs a fast initial scan that identifies open ports and responsive software.
it identifies configuration and security postures within the network.
it focuses the full scan by first comparing network configurations against known vulnerability databases.
it ensures the scan is designed to meet its intended goals by defining scope and sensitivity levels.
question 6
2 pts
which of the following is the advantage of penetration testing over vulnerability scanning?
penetration testing uncovers and exploits deep - vulnerabilities, while vulnerability scanning only discovers surface vulnerabilities.
penetration testing scans a network for open ftp ports to prevent penetration, while vulnerability scanning only discovers versions of the running services.
penetration testing performs syn dos attacks towards a server in a network, while vulnerability scanning only discovers versions of the running services.
penetration testing performs automated scans to discover vulnerabilities and prevent penetration, while vulnerability scanning requires manually scanning for vulnerabilities.

Explanation:

For the first question, a configuration review focuses the full - scan by comparing network configurations against known vulnerability databases, which reduces the overall impact on network performance as it targets the scan more precisely. For the second question, penetration testing goes beyond surface - level discovery like vulnerability scanning and actually uncovers and exploits deep vulnerabilities.

Answer:

1. It focuses the full scan by first comparing network configurations against known vulnerability databases.
2. Penetration testing uncovers and exploits deep vulnerabilities, while vulnerability scanning only discovers surface vulnerabilities.