1D0-571 · Question #3
You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last…
The correct answer is D. The network scanner needs an update. See the full explanation below for the reasoning.
Question
You purchased a network scanner six months ago. In spite of regularly conducting scans using this software, you have noticed that attackers have been able to compromise your servers over the last month. Which of the following is the most likely explanation for this problem?
Options
- AThe network scanner needs to be replaced.
- BThe network scanner is no substitute for scans conducted by an individual.
- CThe network scanner has a trojan.
- DThe network scanner needs an update.
How the community answered
(34 responses)- A3% (1)
- B15% (5)
- C6% (2)
- D76% (26)
Community Discussion
4D is your answer. Network scanners rely on signature databases to detect vulnerabilities, and if you bought it six months ago and never updated it, it simply does not know about any vulnerabilities discovered in the last month, which is exactly the window attackers exploited. Spin up a lab VM, install an old unpatched scanner, run it against a known recent CVE, and you will see it miss the finding completely, that hands-on test will cement this concept better than any flashcard.
The lab test idea is solid, but make sure you also show the scanner catching something it does know about in the same run, because without that control you cannot tell if it missed the CVE due to a stale database or due to a config issue like insufficient privileges or excluded ports.
If the scanner worked fine for five months, what changed?
D is the right call here. A scanner is only as good as its vulnerability definitions, and if you bought it six months ago and never pushed an update, it cannot detect anything discovered after that point, which is exactly the window attackers exploit.