Question

A CySA+ analyst is preparing a vulnerability scan for a new PCI cardholder data environment (CDE) that was recently carved out into its own VLAN. The security manager wants to ensure the scan results reflect only the assets that store, process, or transmit cardholder data, and that the scan does not inadvertently probe systems in adjacent business VLANs. Which action should the analyst take FIRST to meet this requirement?

Accepted Answer

Define the scan scope by explicitly specifying the CDE VLAN's IP address ranges and excluding adjacent network ranges in the scanner configuration

Answer

Run an unauthenticated discovery scan across the entire corporate address space and manually filter the report afterward

Answer

Increase the scan intensity and enable all plugins to ensure maximum coverage of the CDE hosts

Answer

Schedule the scan during peak business hours so live cardholder transactions are captured in the results