Certified Ethical Hacker (CEH) Practice Question

Because the tester is running the scan from inside the organization's perimeter and authenticating to each system with valid credentials, the activity is classified as a credentialed host-based internal vulnerability assessment. The focus is on host configuration data gathered after logging in, rather than only network-visible information. An external network-based assessment would be launched from outside the firewall without trusted access. A passive assessment relies on traffic sniffing instead of active probing. A wireless infrastructure assessment targets 802.11 devices and protocols, which are not mentioned here.