A company has decided to lower costs by conducting an internal assessment on specific devices and various internal and external subnets. The assessment will be done during regular office hours, but it must not affect any production servers. Which of the following would MOST likely be used to complete the assessment? (Choose two.)
A) Agent-based vulnerability scan
B) Black-box penetration testing
C) Configuration review
D) Social engineering
E) Malware sandboxing
F) Tabletop exercise

Question

Quizplus · Accepted Answer

Agent-based vulnerability scans and configuration reviews are both methods that can be used to assess the security of devices and networks without affecting production servers.

A Company Has Decided to Lower Costs by Conducting an Internal