Advanced level · Module 2: Vulnerability Management and Authorised Testing · Lesson 3 of 4
Authorised Scanning in the Lab
Use a vulnerability scanner safely on lab systems.
In this lesson you will
- Run an authenticated vulnerability scan in a lab
- Interpret scan results critically
Key concepts
network discoveryauthenticated scansfalse positivesscan reports
The lesson
In the isolated lab, a vulnerability scanner discovers hosts and services and compares versions and settings with known weaknesses.
Authenticated scans log in to systems and give more accurate results than unauthenticated scans.
Scanners produce false positives and miss things; confirm important findings by checking versions and configuration.
Step by step
- Confirm the lab is isolated.
- Run a discovery scan of the lab range.
- Run an authenticated scan.
- Review and confirm the top findings.
Practice activity
Scan the lab environment and produce a findings list.
Expected result: A confirmed findings list with false positives noted.
Check your understanding
-
Why are authenticated scans more accurate?
Show answer
They can inspect installed software and settings directly.
-
What is a false positive?
Show answer
A reported vulnerability that is not actually present.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.