Exam CV0-003 topic 1 question 345 discussion

Even though ChatGPT says otherwise, i agree with the answers provided

Explanation: To verify whether the vulnerability detected in the public subnet is a true positive, the company needs to perform a follow-up scan with the least effort and cost. ✔ A. A network-based scan – This is a passive or active scan that inspects network traffic and identifies vulnerable services without requiring agent installation. It is a low-cost and efficient method for verifying web server vulnerabilities. ✔ E. A credentialed scan – This scan logs into the web server using administrator credentials to check for vulnerabilities in installed software more accurately than an uncredentialed scan. It helps confirm outdated software versions and misconfigurations without false positives.

E and B. If this pertains to software being vulnerable then a network scan will do nothing. Network based scans work at layer 4 of the OSI model and cannot detect application layer vulnerabilities. An agent such as; Tenable, Nexxus, Cisco Posturing module, SecureConnector can provide a in-depth scan of the software. D, ACAS and other scanning mechanisms can help facilitate information about the software through a credentialed scans. I find this very surprising and somewhat concerning no one knows this answer.

Least effort. Least cost.