Question

A CySA+ analyst is planning the first authenticated vulnerability scan of a company's ERP cluster, which runs on fragile legacy application servers. Past scans of similar systems have caused service crashes due to aggressive plugin behavior. The business requires the ERP system to remain available during core hours (8 a.m. to 6 p.m.). Which action best allows the analyst to obtain meaningful scan results while minimizing operational disruption?

Accepted Answer

Schedule the scan during an approved maintenance window and tune the scan policy to disable dangerous or denial-of-service plugins

Answer

Run the full-intensity scan during core hours so results reflect real production load conditions

Answer

Perform only a passive discovery scan indefinitely to avoid ever touching the ERP servers directly

Answer

Skip the ERP cluster from all scanning and rely solely on the vendor's patch notes for vulnerability data