312-50V10 · Question #338
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?
The correct answer is D. Reduce parallel connections on congestion. The 'Reduce parallel connections on congestion' setting in Nessus monitors network conditions and automatically throttles scan traffic when the network pipe approaches capacity.
Question
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?
Options
- ANetstat WMI Scan
- BSilent Dependencies
- CConsider unscanned ports as closed
- DReduce parallel connections on congestion
How the community answered
(39 responses)- A3% (1)
- B5% (2)
- D92% (36)
Why each option
The 'Reduce parallel connections on congestion' setting in Nessus monitors network conditions and automatically throttles scan traffic when the network pipe approaches capacity.
Netstat WMI Scan uses Windows Management Instrumentation to enumerate active network connections on a Windows target; it has no relation to controlling packet rate or congestion.
Silent Dependencies controls whether Nessus runs prerequisite plugins quietly before dependent checks; it does not affect network congestion or packet throttling.
'Consider unscanned ports as closed' changes how Nessus infers port state for ports not explicitly tested; it does not monitor or respond to network congestion.
Nessus includes a 'Reduce parallel connections on congestion' option that uses TCP congestion signals to detect when the scanner is saturating the network link. When congestion is detected, Nessus reduces the number of simultaneous connections and the packet send rate to avoid overwhelming the network or causing false negatives from dropped responses. This is the specific setting designed to manage scan-induced network congestion.
Concept tested: Nessus scan throttling and congestion detection setting
Source: https://docs.tenable.com/nessus/Content/ScanAndPolicyTemplates.htm
Topics
Community Discussion
No community discussion yet for this question.