Discuss EC-Council 312-50 Exam Topic 9 Question 6

Why is a penetration test considered to be more thorough than vulnerability scan?

AThe tools used by penetration testers tend to have much more comprehensive vulnerability databases.

BA penetration test actively exploits vulnerabilities in the targeted infrastructure, while a vulnerability scan does not typically involve active exploitation.

CIt is not -- a penetration test is often performed by an automated tool, while a vulnerability scan requires active engagement.

DVulnerability scans only do host discovery and port scanning by default.

Suggested Answer: B

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Cassi 12 months ago

Yeah, I heard scans miss a lot of critical issues compared to pen tests.

Ling 12 months ago

Scans are mostly just surface-level checks, right?

Flo 12 months ago

Wait, are you saying scans don’t exploit at all? That seems off.

Brynn 1 year ago

Totally agree, pen tests are way more in-depth!

Douglass 1 year ago

Pen tests actually exploit vulnerabilities, scans just find them.

Odette 1 year ago

I feel like option C might be misleading; I thought penetration tests were more manual and involved more analysis than automated tools.

Rhea 1 year ago

I practiced a question similar to this, and I think the key difference is that penetration tests simulate real attacks, while scans are more passive.

Lashaun 1 year ago

I’m not entirely sure, but I think vulnerability scans just identify issues without trying to exploit them, right?

Carolann 1 year ago

I remember that penetration tests involve actually exploiting vulnerabilities, which makes them more thorough than just scanning.

Allene 1 year ago

Okay, let's see. If we can't resolve the issue quickly, then option D to manually install the hot-fix package might be the fastest way to get the fix in place. But I'll need to double-check the implications of that.

Romana 1 year ago

Hmm, I'm a little unsure about this one. The question is asking what information must be included, so I'm not sure if it's just the field name or if there's something else I need to include as well. I might have to think this through a bit more.

Bernardine 1 year ago

This is a tricky one. I'm not super familiar with Adair's theory, so I'll need to read the options closely and try to apply the key principles. Hopefully, I can eliminate a few choices and make an educated guess.

EC-Council 312-50 Exam - Topic 9 Question 6 Discussion