Exam 312-50v12 topic 1 question 201 discussion

I D and so does ChatGPT because it does the most to meet the stated requirements. Why the others are not as suitable: A. Inference-based assessment solution: While this mentions one key feature (inference-based testing), it doesn’t address automation, attacker perspective, or multi-network support. It’s a method, not a comprehensive solution. B. Tree-based assessment approach: This is a structured decision-making or modeling technique, not a full-featured vulnerability assessment solution. C. Product-based solution installed on a private network: This would provide an internal perspective, not mimicking the external attacker's view. It might not scale easily across multiple networks or reflect external threats as well as a service-based solution.

Page 558 v12

I would have said A but the outside view pretty much says that it has to be a 3rd party

Service - based solution. - Service based solutions are third-party solutions which offers security and auditing. This can be host either inside or outside the network. This can be a security risk of being compromised.

D. Service-based solution offered by an auditing firm

A service-based solution provided by an auditing firm often includes external vulnerability assessments that mimic the perspective of an outside attacker. These services typically involve experienced security professionals who perform thorough and well-organized testing, utilize continuously updated databases of vulnerabilities, and can adapt to multiple network environments

I was wrong... D. Service-based solution offered by an auditing firm A service-based solution offered by an auditing firm, especially if hosted outside the organization's network, can provide an external perspective that imitates the outside view of attackers. Auditing firms often perform well-organized inference-based testing, continuously update their databases with the latest threat intelligence, and can support assessments across multiple networks.

A. Inference-based assessment solution

I think it's D (Module 05 Page 558) D. Service-based solution offered by an auditing firm