Inference-Based Vulnerability Assessment Process
Short answer
D Inference-Based Assessment begins by inventoring protocols to identify attached services and then executes only relevant vulnerability tests for those services.
Question
Key Takeaways
The key trap is confusing the dynamic discovery process with generic service-based checks; inference-based specifically starts with protocol inventory to infer likely services before testing.
This question defines Inference-Based Assessment, a vulnerability scanning method that dynamically selects tests based on discovered protocols and services rather than using a static database.
Common mistake: Many learners select Service-based solutions (A) because they focus on the 'services' mentioned in the scenario, missing the critical first step of protocol inventory which defines the inference approach.
Expert Analysis
Why the Answer Is Correct
The scenario describes a specific workflow: building an inventory of protocols -> detecting ports/services -> selecting relevant vulnerabilities. This matches the definition of Inference-Based Assessment found in EC-Council materials. It infers the presence of services from low-level protocol data to tailor the scan.
Why the Other Options Are Wrong
Service-based solutions (A) typically refer to checking against a known list of services without necessarily starting from protocol inventory or using inference logic. Product-based (B) refers to commercial tools, not a methodology. Tree-based (C) is not a standard term for this specific scanning workflow in this context.
Community Comment Notes
The majority voted for D, correctly identifying the methodology. One commenter noted, "scanning starts by building an inventory of the protocols..." which perfectly aligns with the question text. Another user argued for A but failed to recognize that the protocol-first approach is the defining characteristic of inference.
Exam Strategy
Focus on the sequence of actions described. If the scan starts with protocol analysis to deduce services, it is Inference-Based. If it just lists known services, it might be Service-Based. Look for the word 'inventory' or 'protocols' as triggers for Inference.
Frequently Asked Questions
What distinguishes inference-based from service-based assessment?
Why is product-based incorrect here?
Community Votes
67% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 4 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 4
-
Gentle_Hckr 👍 2 Answered AThe key point in the scenario is that James identified the services (like email, web, or database servers) and then selected the relevant vulnerabilities for each service. This approach is characteristic of service-based solutions, where vulnerabilities are chosen based on the specific services identified on the machine. In Inference-Based Assessment, there would typically be more of a focus on deducing or inferring vulnerabilities from the services, rather than directly selecting known vulnerabilities tied to those services. So, based on the scenario, A. Service-based solutions is the correct choice.
-
SNimlaka 👍 2 Answered DInference-Based Assessment: In an inference-based assessment, scanning starts by building an inventory of the protocols found on the machine. After finding a protocol, the scanning process starts to detect which ports are attached to services, such as an email server, web server, or database server. After finding services, it selects vulnerabilities on each machine and starts to execute only those relevant tests. Page 582
-
ehsarx 👍 1 Answered DInference-Based Assessment: This approach begins by cataloging the protocols present on a machine. Once a protocol is identified, the scanning process detects the associated ports and services, such as an email, web server, or database server. Upon identifying services, it targets specific vulnerabilities on each machine and executes tests that are only relevant to the discovered services.
-
mulekule 👍 1 Answered DInference-based vulnerability assessment starts by identifying protocols on a machine, then detects associated ports and services, and finally selects and executes relevant vulnerability tests based on the identified services.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.