An organization is rolling out a robust vulnerability management system to monitor SCADA devices on the network. Which of the following scan types should be used to monitor these system types?
Correct Answer: C
Passive scanning is the safest approach for SCADA systems to avoid disrupting their operations. It detects vulnerabilities by analyzing network traffic without directly interacting with the systems, aligning with CASP+ objective 4.2, which focuses on securing critical systems and reducing risks during vulnerability management.
Passive scanning collects network and device information without sending intrusive probes, which is critical for SCADA (Supervisory Control and Data Acquisition) systems as they are highly sensitive to disruptions.
* Web application scanning focuses on website vulnerabilities and is irrelevant to SCADA systems.
* Agent-based scanning involves installing software agents, which may not be feasible for SCADA.
* Authenticated scanning requires credentials, which can still disrupt SCADA devices.
References:
* CompTIA CASP+ Exam Objective 4.1: Conduct vulnerability scans to evaluate the state of system security.
* CASP+ Study Guide, 5th Edition, Chapter 7, Specialized Vulnerability Scanning.
________________________________________