Exam Essentials
Vulnerability scans automate some of the tedious work of penetration testing. Automated vulnerability scanners allow penetration testers to rapidly check large numbers of systems for the presence of known vulnerabilities. While this greatly speeds up the work of a penetration tester, the scan may also attract attention from cybersecurity professionals.
Scan targets should be selected based on the results of discovery scans and OSINT. Discovery scans provide penetration testers with an automated way to identify hosts that exist on the network and build an asset inventory. They may then select scan targets based on the likelihood that it will advance the goals of the penetration test. This may include information about data classification, system exposure, services offered, and the status of the system as a test, development, or production environment.
Configuring scan settings allows customization to meet the tester’s requirements. Penetration testers may customize...