A county security team is defining vulnerability scan coverage for an internet-facing tax portal and a private admin VPC. What scanning approach fits the environments?
Select an answer to reveal the explanation.
Short Explanation
Public storefront and locked back office need different flashlight beams. The tax portal gets external-facing scan scope; the admin VPC gets careful internal scans—not one blunt scan from the open internet for both.
Full Explanation
Vulnerability management begins by defining appropriate scan scope for each environment. Internet-facing assets warrant external exposure checks, while internal admin VPCs require controlled internal or authenticated scanning that respects network segmentation. Identical aggressive internet scans against private admin hosts, or omitting public portals from scope, leave blind spots or create unnecessary risk.