CompTIA Security Exam Practice Questions Sample SY0 501 Q428

Which of the following should a security analyst perform FIRST to determine the vulnerabilities of a legacy system?

A. Passive scan
B. Aggressive scan
C. Credentialed scan
D. Intrusive scan

Correct Answer: A