What type of scan policy is commonly used for non-credentialed scans?

The Standard Scan Policy is commonly used for non-credentialed scans because it is designed to gather information about network vulnerabilities without requiring special user credentials. Non-credentialed scans simulate an external attacker's perspective by attempting to identify vulnerabilities that can be exploited without access to internal systems. The Standard Scan Policy typically includes a variety of scan checks and methods that help in identifying potential security weaknesses across devices, applications, and network configurations without needing inside access.

In contrast, a Credentialed Scan Policy is specifically for situations where the scanning tool has valid user credentials, allowing it to perform more in-depth scans and gather more detailed information. Basic and External Scan Policies may have specific use cases, but they do not primarily focus on non-credentialed scanning.