CompTIA CySA+ CS0-003 Practice Question

External scanning is the most suitable choice for detecting vulnerabilities that could be exploited by attackers over the internet. This type of scan focuses on discovering weaknesses from the perspective of an external attacker and can help you address any issues before they are discovered and exploited. Internal scans, while also important, focus on threats within the network and are less likely to uncover vulnerabilities that can be exploited from the internet. Credentialed scans provide more detailed reports but are usually used internally to assess specific configurations and patches. Passive scans, while useful for low-impact monitoring, do not actively probe for vulnerabilities.