What type of vulnerability scan is performed without a system account?
An analyst is performing a vulnerability scan against the web servers exposed to the internet without a system account. Which of the following is most likely being performed?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the distinction between credential and non-credentialed scans, with the common trap being confusion between non-credentialed active scans and passive scans.
Learn why a non-credentialed scan is the correct answer for vulnerability scanning without a system account, as confirmed by unanimous community consensus. Understand how this scan simulates an external attacker's view without requiring login credentials.
E. Passive scan is the most common wrong answer because test-takers confuse 'no credentials' with 'passive listening,' but a non-credentialed scan is an active scan that sends probes without authentication.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A non-credentialed scan is performed without logging into the target system, exactly matching the scenario described. As comment [1] explains, this type of scan is limited to detecting vulnerabilities exposed without privileged access and is commonly used to assess what an external attacker could see or exploit. The exam question emphasizes 'without a system account,' directly pointing to the non-credentialed approach, and all voters selected A.Why the Other Options Are Wrong
Packet capture (B) is a network monitoring technique, not a vulnerability scan. Privilege escalation (C) is an exploitation technique used after initial access, not a scanning phase. System enumeration (D) typically involves gathering system details, often after credentials are obtained, and is not the primary scan type. Passive scan (E) listens to traffic without active probing, whereas the question describes an active vulnerability scan that just lacks credentials.Community Comment Notes
Comment [1] provides the clearest explanation, defining a non-credentialed scan as a scan conducted without login credentials and noting its value in simulating an external attacker. Comment [2] offers a concise summary: 'A type of scan conducted without logging into the system.' These comments reinforce that the answer hinges on the absence of a system account, not on whether the scan is active or passive.Official Reference
Exam Strategy
When you see 'without a system account,' immediately associate it with non-credentialed scanning, which simulates an external attacker's perspective. Remember that non-credentialed scans are still active scans; they send probes to discover vulnerabilities, so avoid choosing 'passive scan' just because no credentials are used.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →