Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The answer is A, agent based solutions are them most lean way to perform scanning without burdening your network at all. D wouldnt be accurate since you will still have to create firewall rules for the sensors in the segments. Agent based will not require any firewall interactions nor credentials
A. Deploy agents on all systems to perform the scans, because agent-based scanning lets endpoints report results outbound to a central console and avoids opening many inter-segment firewall paths for scanners, while a central scanner or per-segment sensors usually require numerous allow rules across segmented networks and non-credentialed scans miss deeper vulnerability and configuration findings.
• Agents reside on the endpoints and perform scans locally. • They do not require inbound firewall rules from a central scanner to each segment. • This approach avoids complex firewall configurations across multiple network segments. It’s scalable and efficient in segmented environments.