A company hires a consulting firm to crawl its Active Directory network with a non-domain account looking for unpatched systems. Actively taking control of systems is out of scope, as is the creation of new administrator accounts. For which of the following is the company hiring the consulting firm?
A) Vulnerability scanning
B) Penetration testing
C) Application fuzzing
D) User permission auditing

Question

Quizplus · Accepted Answer

The company is hiring the consulting firm for vulnerability scanning, which involves identifying unpatched systems and vulnerabilities without actively exploiting them or taking control of systems.

A Company Hires a Consulting Firm to Crawl Its Active