Which assessment scans the internal infrastructure to identify exploits and vulnerabilities?

Which assessment scans the internal infrastructure to identify exploits and vulnerabilities?

• A. External Assessment
• B. Host-based Assessment
• C. Network-based Assessment
• D. Internal Assessment

Answer: (D)

Scanning the internal infrastructure from inside the network focuses on uncovering weaknesses that could be exploited by someone with internal access. It uses authenticated access to multiple systems to reveal issues like unpatched software, misconfigurations, weak or default passwords, and other vulnerabilities that aren’t visible from the outside. This scope—assets and services inside the perimeter—is what makes it the best fit for identifying exploits and vulnerabilities within the internal environment. External assessment looks at Internet-facing assets, host-based assessment targets a single machine, and network-based assessment concentrates on devices and services at the network level rather than the internal configuration of hosts.

Scanning the internal infrastructure from inside the network focuses on uncovering weaknesses that could be exploited by someone with internal access. It uses authenticated access to multiple systems to reveal issues like unpatched software, misconfigurations, weak or default passwords, and other vulnerabilities that aren’t visible from the outside. This scope—assets and services inside the perimeter—is what makes it the best fit for identifying exploits and vulnerabilities within the internal environment. External assessment looks at Internet-facing assets, host-based assessment targets a single machine, and network-based assessment concentrates on devices and services at the network level rather than the internal configuration of hosts.