Exam CS0-003 topic 1 question 141 discussion

Correct A discovery scan is typically used to identify the scope of a web application and understand where the scan will go. This type of scan is often the first step in assessing a web application's security and helps the analyst determine which areas should be further examined or tested in-depth.

Discovery Scan: A discovery scan, also known as a reconnaissance scan or a footprinting scan, is a type of scanning activity that aims to gather information about a target system or network. It is typically the initial phase of a security assessment or penetration testing. In the context of a web application, a discovery scan would focus on identifying the structure of the application, including the URIs (Uniform Resource Identifiers) or URLs that can be accessed. It helps in mapping out the application's layout and identifying potential entry points for further testing.

B is correct. A discovery scan finds information about your web application without performing vulnerability testing. This is a good way to understand where the scan will go and whether there are URIs you should blacklist for vulnerability scans.