Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
These systems are fragile so you don't want to do something to cause it to malfuntion like the question asks. Passive scans are the most gentle
I vote agent-based scanning because only IT services can host them. Passive scanning is good for discovery but might not be effective for vulnerability management. OT/ICS will probably be safe on a separate network, preferably air-gap and well planned audit and vulnerability assessment.
Well actually the question stated that they're in the process of implementing vulnerability management, so host and port discovery sounds like a good way to start. I'd change my answer to B in that regard.