Which assessment evaluates the network from an outside perspective to identify exploits accessible from the internet?

Which assessment evaluates the network from an outside perspective to identify exploits accessible from the internet?

• A. External Assessment
• B. Internal Assessment
• C. Network-based Assessment
• D. Application Assessment

Answer: (A)

External assessment focuses on the network’s perimeter from an outside point of view, simulating how an attacker on the Internet would access publicly reachable systems. It aims to uncover exploits that could be reached without any inside access—things like vulnerable web servers, exposed services, weak configurations, or unpatched software on border devices. That perspective makes it the best fit for identifying vulnerabilities that are accessible from the Internet. Internal assessment, by comparison, assumes some form of inside access and looks for ways to move laterally within the network. Network-based assessment targets the network infrastructure itself—routers, switches, firewalls, segmentation—often from an external or internal vantage, but focusing on the network devices and their configuration. Application assessment concentrates on weaknesses within individual software applications rather than the perimeter as a whole.

External assessment focuses on the network’s perimeter from an outside point of view, simulating how an attacker on the Internet would access publicly reachable systems. It aims to uncover exploits that could be reached without any inside access—things like vulnerable web servers, exposed services, weak configurations, or unpatched software on border devices. That perspective makes it the best fit for identifying vulnerabilities that are accessible from the Internet.

Internal assessment, by comparison, assumes some form of inside access and looks for ways to move laterally within the network. Network-based assessment targets the network infrastructure itself—routers, switches, firewalls, segmentation—often from an external or internal vantage, but focusing on the network devices and their configuration. Application assessment concentrates on weaknesses within individual software applications rather than the perimeter as a whole.