SY0-701 Question 264

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A non-credentialed scan is a type of vulnerability assessment performed without logging into the target system. Since the analyst is scanning without a system account, they don’t have access to internal configurations or deeper system-level details. Instead, they’re evaluating vulnerabilities from an external perspective, similar to how an attacker would. This method: Identifies exposed services and ports Detects known vulnerabilities from the outside Is useful for assessing publicly accessible systems like web servers

• 5

  The correct answer is: A. Non-credentialed scan A non-credentialed scan is a vulnerability scan conducted without using login credentials. This type of scan is limited to detecting vulnerabilities that are exposed without needing privileged access. It’s commonly used to assess what an external attacker could potentially see or exploit without having any system account access, which aligns with the scenario described.

• Chose A2

  Without system account.