Credentialed scans differ from non-credentialed scans in that credentialed scans:

• A. Have higher risk of detection by IDS
• B. Use valid credentials to access deeper system data
• C. Are performed only on external perimeter
• D. Do not require any authentication

Answer: (B)

Credentialed scans involve using valid credentials to authenticate to the target systems, which allows the scanner to access deeper data such as configuration details, installed software, user permissions, patch levels, and sensitive files. This authenticated access provides a more complete and accurate assessment than unauthenticated scans, which are limited to surface-level observations like open ports and banners. The other statements don’t fit because credentialed scans are not defined by detection risk, are not restricted to the external perimeter, and do require authentication.