Inference-Based Vulnerability Assessment Process
An organization is performing a vulnerability assessment for mitigating threats. James, a pen tester, scanned the organization by building an inventory of the protocols found on the organization’s machines to detect which ports are attached to services such as an email server, a web server, or a database server. After identifying the services, he selected the vulnerabilities on each machine and started executing only the relevant tests. What is the type of vulnerability assessment solution that James employed in the above scenario?
Community Votes
67% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The key trap is confusing the dynamic discovery process with generic service-based checks; inference-based specifically starts with protocol inventory to infer likely services before testing.
This question defines Inference-Based Assessment, a vulnerability scanning method that dynamically selects tests based on discovered protocols and services rather than using a static database.
Many learners select Service-based solutions (A) because they focus on the 'services' mentioned in the scenario, missing the critical first step of protocol inventory which defines the inference approach.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The scenario describes a specific workflow: building an inventory of protocols -> detecting ports/services -> selecting relevant vulnerabilities. This matches the definition of Inference-Based Assessment found in EC-Council materials. It infers the presence of services from low-level protocol data to tailor the scan.Why the Other Options Are Wrong
Service-based solutions (A) typically refer to checking against a known list of services without necessarily starting from protocol inventory or using inference logic. Product-based (B) refers to commercial tools, not a methodology. Tree-based (C) is not a standard term for this specific scanning workflow in this context.Community Comment Notes
The majority voted for D, correctly identifying the methodology. One commenter noted, "scanning starts by building an inventory of the protocols..." which perfectly aligns with the question text. Another user argued for A but failed to recognize that the protocol-first approach is the defining characteristic of inference.Exam Strategy
Focus on the sequence of actions described. If the scan starts with protocol analysis to deduce services, it is Inference-Based. If it just lists known services, it might be Service-Based. Look for the word 'inventory' or 'protocols' as triggers for Inference.
Frequently Asked Questions
What distinguishes inference-based from service-based assessment?
Inference-based starts with protocol inventory to deduce services, while service-based typically scans against a pre-defined list of known services.
Why is product-based incorrect here?
Product-based refers to the type of tool (commercial vs open source), not the logical methodology of how vulnerabilities are selected during the scan.