Which assessment would evaluate the internal network by examining hosts, services, and vulnerabilities from within the organization?

Which assessment would evaluate the internal network by examining hosts, services, and vulnerabilities from within the organization?

• A. External Assessment
• B. Network-based Assessment
• C. Application Assessment
• D. Internal Assessment

Answer: (D)

Assessing security from inside the organization means evaluating the internal network from an inside vantage point, using internal access to directly inspect hosts, the services running on them, and the vulnerabilities those services may expose. This approach reveals weaknesses an attacker could exploit once they’re inside or have internal credentials, such as misconfigurations, unpatched systems, overly permissive access, and open ports that are visible only from within the network boundary. External assessment looks from outside the network, focusing on what an Internet-facing adversary would see and access, which doesn’t fully reveal internal host configurations or internal-service weaknesses. A network-based assessment focuses on the network’s devices and traffic patterns, typically from various network vantage points, but the phrasing here emphasizes the inside perspective. An application assessment targets the security of software applications rather than the broader host and service-level posture of the internal network. Therefore, evaluating the internal network from within, by examining hosts, services, and vulnerabilities, is best described as an internal assessment.

Assessing security from inside the organization means evaluating the internal network from an inside vantage point, using internal access to directly inspect hosts, the services running on them, and the vulnerabilities those services may expose. This approach reveals weaknesses an attacker could exploit once they’re inside or have internal credentials, such as misconfigurations, unpatched systems, overly permissive access, and open ports that are visible only from within the network boundary.

External assessment looks from outside the network, focusing on what an Internet-facing adversary would see and access, which doesn’t fully reveal internal host configurations or internal-service weaknesses. A network-based assessment focuses on the network’s devices and traffic patterns, typically from various network vantage points, but the phrasing here emphasizes the inside perspective. An application assessment targets the security of software applications rather than the broader host and service-level posture of the internal network. Therefore, evaluating the internal network from within, by examining hosts, services, and vulnerabilities, is best described as an internal assessment.