Which approach involves limiting scans to ports approved by the firewall configuration, but may be invasive and not assess firewall failures?

• A. Conduct a full port sweep
• B. Dealing with large Scans by speeding up (2:12)
• C. Dealing with large Scans by limiting Scope (2:11)
• D. Dealing with large Scans by limiting Scope (2:10)

Answer: (D)

Limiting the scan to ports that the firewall configuration explicitly approves is a practical way to manage large assessments. By sticking to only those ports, you respect the security policy and reduce noise and time spent on scanning, which helps you stay within approved boundaries. This approach is considered invasive because you’re actively probing services within the allowed ports, potentially stressing those services or triggering alerts, even though you’re not touching every possible port. However, it won’t reliably reveal firewall failures, since you aren’t testing how traffic is handled on ports that are blocked or dropped by the firewall. In contrast, a full port sweep would probe every port, and the other options describe general strategies for handling large scans without specifically tying the scope to firewall-approved ports.