What type of vulnerability scan is performed without a system account?

An analyst is performing a vulnerability scan against the web servers exposed to the internet without a system account. Which of the following is most likely being performed?

  1. Non-credentialed scan Source Reference Answer
  2. Packet capture
  3. Privilege escalation
  4. System enumeration
  5. Passive scan

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests the distinction between credential and non-credentialed scans, with the common trap being confusion between non-credentialed active scans and passive scans.

Learn why a non-credentialed scan is the correct answer for vulnerability scanning without a system account, as confirmed by unanimous community consensus. Understand how this scan simulates an external attacker's view without requiring login credentials.

E. Passive scan is the most common wrong answer because test-takers confuse 'no credentials' with 'passive listening,' but a non-credentialed scan is an active scan that sends probes without authentication.

Community Discussion (3 comments)

ViciousAkira 👍 4
The correct answer is: A. Non-credentialed scan A non-credentialed scan is a vulnerability scan conducted without using login credentials. This type of scan is limited to detecting vulnerabilities that are exposed without needing privileged access. It’s commonly used to assess what an external attacker could potentially see or exploit without having any system account access, which aligns with the scenario described.
FrozenCarrot 👍 1 Selected: A
Without system account.
jafyyy 👍 3
A Type of scan conducted without logging into the system

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

A non-credentialed scan is performed without logging into the target system, exactly matching the scenario described. As comment [1] explains, this type of scan is limited to detecting vulnerabilities exposed without privileged access and is commonly used to assess what an external attacker could see or exploit. The exam question emphasizes 'without a system account,' directly pointing to the non-credentialed approach, and all voters selected A.

Why the Other Options Are Wrong

Packet capture (B) is a network monitoring technique, not a vulnerability scan. Privilege escalation (C) is an exploitation technique used after initial access, not a scanning phase. System enumeration (D) typically involves gathering system details, often after credentials are obtained, and is not the primary scan type. Passive scan (E) listens to traffic without active probing, whereas the question describes an active vulnerability scan that just lacks credentials.

Community Comment Notes

Comment [1] provides the clearest explanation, defining a non-credentialed scan as a scan conducted without login credentials and noting its value in simulating an external attacker. Comment [2] offers a concise summary: 'A type of scan conducted without logging into the system.' These comments reinforce that the answer hinges on the absence of a system account, not on whether the scan is active or passive.

Official Reference

Exam Strategy

When you see 'without a system account,' immediately associate it with non-credentialed scanning, which simulates an external attacker's perspective. Remember that non-credentialed scans are still active scans; they send probes to discover vulnerabilities, so avoid choosing 'passive scan' just because no credentials are used.

Related Analysis

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide