16. A cybersecurity analyst is tasked with scanning a web application to understand where the scan will go and whether there are URLs that should be denied access prior to more in-depth scanning. Which of the following best fits the type of scanning activity requested?
Answer: B
Discovery scan
A discovery scan is the most appropriate type of scanning activity in this scenario as it is focused on identifying accessible URLs and resources within a web application before any detailed examination is conducted. This initial step is crucial for determining which areas may require restricted access prior to more thorough assessments.
A) Non-credentialed scan
A non-credentialed scan does not utilize any user credentials to access the application, which limits its ability to identify all potential vulnerabilities or areas of concern. While it may provide some insights, it is not specifically designed to map out URLs for access control, making it less suitable for this task.
B) Discovery scan
The discovery scan is explicitly aimed at uncovering the structure and available URLs within a web application, allowing the analyst to determine which parts should be restricted. This type of scan lays the groundwork for more in-depth assessments by identifying the surface level of the application, making it the best fit for the given task.
C) Vulnerability scan
A vulnerability scan is intended to identify security weaknesses within an application after it has been mapped out. While it is an essential step in the cybersecurity process, it assumes prior knowledge of the application’s structure and does not focus on initial URL discovery or access control, thus making it less relevant to the current needs.
D) Credentialed scan
A credentialed scan involves using authenticated access to probe deeper into the application’s security posture. While it provides a more thorough analysis of vulnerabilities, it is not specifically designed for the preliminary task of identifying URLs to restrict access, which is the focus of the current scanning activity.
Conclusion
The discovery scan is the most suitable option as it specifically addresses the requirement to identify which URLs should be denied access before further scanning takes place. In contrast, the other options either do not provide the necessary insights for access control or focus on vulnerability detection rather than mapping application structure.