What is a characteristic of agentless vulnerability scanning?

It scans systems remotely without installing software on them

It requires an agent to be installed on each endpoint

It provides continuous monitoring of endpoints

It only scans systems that are offline

A large enterprise has 10,000 endpoints across multiple geographically dispersed sites. The security team needs continuous vulnerability visibility and wants to reduce the load on the central network. They also need to scan endpoints that are frequently offline. Which approach best balances these requirements?

Deploy agents on all endpoints that scan locally and report results to the central server

Perform external scans of all public IP addresses

Use passive monitoring at each site

Run central agentless scans from the main office

What is the primary purpose of asset discovery in vulnerability management?

To assign IP addresses to new devices on the network

To identify and catalog all devices and systems connected to the network

To patch all known vulnerabilities on identified systems

To monitor network traffic for malicious activity

How does agent-based scanning operate?

Software installed on each endpoint performs local scans and reports results

A central scanner remotely probes each device over the network

Scans are performed only during scheduled maintenance windows

Network traffic is passively monitored to identify vulnerabilities

Which activity is a key part of asset discovery?

Training employees on security awareness

Exploiting vulnerabilities to test defenses

Enumerating all devices and software on the network

Configuring firewalls to block unauthorized access

CompTIACySA+

Domain 2Objective 1

Vulnerability Scanning CS0-003 Practice Questions (Page 3)

Part of the Vulnerability management domain, which accounts for 30% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–33 in this domain), expect 4–7 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

12concepts

30%of the exam

Questions 11–15

11foundation · easy
What is a characteristic of agentless vulnerability scanning?
Select an answer first
12expert · hard
A large enterprise has 10,000 endpoints across multiple geographically dispersed sites. The security team needs continuous vulnerability visibility and wants to reduce the load on the central network. They also need to scan endpoints that are frequently offline. Which approach best balances these requirements?
Select an answer first
13foundation · easy
What is the primary purpose of asset discovery in vulnerability management?
Select an answer first
14foundation · easy
How does agent-based scanning operate?
Select an answer first
15foundation · easy
Which activity is a key part of asset discovery?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.