Which of the following business challenges could be solved by using a vulnerability scanner?

Auditing naming conventions is an asset management or configuration management task, not a function of vulnerability scanners.

Determining lateral movement after a compromise requires forensic investigation tools, a SIEM, or endpoint detection and response (EDR) solutions, not a vulnerability scanner.

Bulk removal of administrator access is an identity and access management (IAM) or Group Policy operation, not a vulnerability scanning function.

Vulnerability scanners are designed to probe hosts for known weaknesses, misconfigurations, and policy violations - including unauthorized or non-compliant software installations. A monthly compliance check against approved host application usage policies is a direct use case, as the scanner can enumerate installed applications and compare them against a baseline or policy definition.