Which statement best describes authenticated scanning?

• A. Authenticated scans run without credentials and test from outside.
• B. Authenticated scans run with valid credentials to see internal exposure.
• C. Authenticated scans have no impact on vulnerability discovery.
• D. Authenticated scans test only DNS configurations.

Answer: (B)

Authenticated scanning relies on valid credentials to log into the target systems, so the scanner can see what’s accessible from inside. With those credentials, it can explore internal services, verify access controls, check patch levels, and inspect configurations and sensitive areas of applications that require login. This deeper access reveals vulnerabilities and exposures that an outside, unauthenticated view would miss, giving a more accurate picture of real risk.

This is why the statement about running without credentials is not describing authenticated scanning. It’s also why the idea that authentication has no impact on vulnerability discovery isn’t correct—certain issues only appear once the scanner can access authenticated areas, such as specific web app flaws, permission problems, and data exposure behind login. And scanning that focuses only on DNS configurations misses the broader scope of authenticated tests, which cover internal services and applications as well.