# Vulnerability Assessment

## Scoping questions
To scope a vulnerability assessment, here are some of the questions we'll need answered:

* How many (approximately) live IPs are in scope for the assessment?
* Are you looking for a point-in-time assessment, or long-term vulnerability management (or both?)
* For *internal* network vulnerability assessments, will it be possible for 7 Minute Security to be provisioned a temporary domain administrator account to conduct our assessment?  

!!!danger
Without doing *authenticated* scanning, we cannot see registry entries and patch levels on target systems.  In this configuration, our assessment will only see the "surface" of each system and thus your assessment results will give a false sense of security.
!!!