Choosing a Vulnerability Assessment Solution for an External View
A large e-commerce organization is planning to implement a vulnerability assessment solution to enhance its security posture. They require a solution that imitates the outside view of attackers, performs well-organized inference-based testing, scans automatically against continuously updated databases, and supports multiple networks. Given these requirements, which type of vulnerability assessment solution would be most appropriate?
Community Votes
91% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of vulnerability assessment solution types, where the requirement for an outside view of attackers specifically dictates a service-based solution over an internal product-based one.
This analysis identifies the correct vulnerability assessment solution for an organization needing an external attacker perspective, inference-based testing, and continuously updated databases. It establishes that a service-based solution offered by an auditing firm is the most appropriate choice.
Choosing option A (Inference-based) because the question mentions inference-based testing, but this is merely a testing method, not the comprehensive solution type that provides the external view.
Community Discussion (8 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A service-based solution offered by an auditing firm perfectly aligns with the organization's requirements. These solutions are hosted outside the organization's network, which provides the outside view of attackers necessary to identify externally exploitable vulnerabilities. Furthermore, auditing firms specialize in well-organized inference-based testing and maintain continuously updated vulnerability databases to support multiple network environments.Why the Other Options Are Wrong
Option A is incorrect because inference-based refers to a testing methodology, not the overarching solution type that fulfills the external view and managed database requirements. Option B is incorrect because a tree-based approach maps paths to exploits but does not inherently provide the external attacker perspective or managed service benefits. Option C is incorrect because a product-based solution installed on a private network focuses on internal vulnerabilities and does not imitate the outside view of attackers.Community Comment Notes
Several commenters correctly pointed out that the requirement to imitate an outside view necessitates a third-party solution, as LordXander noted, "the outside view pretty much says that it has to be a 3rd party". Others referenced the official course material, such as qwerty100 pointing to "Module 05 Page 558". Insaniunt elaborated that a service-based solution "can provide an external perspective that imitates the outside view of attackers."Exam Strategy
When a vulnerability assessment question specifies the need for an outside view or attacker perspective, immediately eliminate product-based (internal) solutions and look for service-based (external/third-party) options.