Scan the same host authenticated and unauthenticated

short · 50 min · Objective 3.2

Task

Run both scan types against one host and measure the difference, then report your coverage as a fraction rather than as a finding count.

Steps

  1. Run an unauthenticated scan and save the findings to lab/scan-unauth.txt.
  2. Run an authenticated scan of the same host at the same time and save to lab/scan-auth.txt.
  3. Write lab/scan-diff.md recording both counts and naming three categories present only in the authenticated view -- missing patches, local configuration, permissions, installed-but-unused software.
  4. Derive your scan scope from lab/cmdb.csv rather than from a typed range, and write lab/scan-scope.csv as asset,method,scanned,reason.
  5. Report coverage in lab/scan-coverage.md as 'N of M assets scanned' with the reasons for every failure -- credentials refused, no agent, unreachable.

Verify

grep -c . lab/scan-unauth.txt lab/scan-auth.txt
grep -Ec '[0-9]+' lab/scan-diff.md
awk -F, 'NR>1 && $3=="no" {print $4}' lab/scan-scope.csv | sort | uniq -c
grep -Ec '[0-9]+ of [0-9]+' lab/scan-coverage.md

Both scans run with different counts, and the coverage sentence present with real numbers and reasons. A findings count quoted without a coverage figure is not interpretable, and that is the whole point of this lab.

This is an independent study companion for CompTIA SecurityX CAS-005 and is not produced by or endorsed by CompTIA.