A penetration tester must run a vulnerability scan against a target. What is the benefit of running an authenticated scan instead of an unauthenticated scan?
- Authenticated scans can provide a more detailed picture of the target attack surface.
- Authenticated scans are a form of passive reconnaissance that does not trigger target security alarms.
- Authenticated scans are performed without user credentials.
- Authenticated scans are less complex and are quicker than unauthenticated scans.
Explanation & Hint: Authenticated scans require credentials with root-level access to the system and can provide a complete picture of the target attack surface.
|