Question

A vulnerability analyst is preparing a scan of a cluster of legacy database servers that support a critical order-processing application. Past experience shows some of these servers crash under aggressive testing. The analyst wants to detect vulnerabilities without triggering the actual exploit behavior that could disrupt the service. Which scan configuration should the analyst choose?

Accepted Answer

Enable non-intrusive (safe check) plugins that infer vulnerabilities from banners and version data rather than actively exploiting them

Answer

Run intrusive plugins that actively attempt exploitation to confirm each finding with certainty

Answer

Perform a passive-only network sniffing scan and skip host-level checks entirely

Answer

Disable authentication on the scan to reduce the load placed on the target systems