nerdexam
EC-Council

312-50V10 · Question #338

Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

The correct answer is D. Reduce parallel connections on congestion. The 'Reduce parallel connections on congestion' setting in Nessus monitors network conditions and automatically throttles scan traffic when the network pipe approaches capacity.

Vulnerability Analysis

Question

Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

Options

  • ANetstat WMI Scan
  • BSilent Dependencies
  • CConsider unscanned ports as closed
  • DReduce parallel connections on congestion

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    5% (2)
  • D
    92% (36)

Why each option

The 'Reduce parallel connections on congestion' setting in Nessus monitors network conditions and automatically throttles scan traffic when the network pipe approaches capacity.

ANetstat WMI Scan

Netstat WMI Scan uses Windows Management Instrumentation to enumerate active network connections on a Windows target; it has no relation to controlling packet rate or congestion.

BSilent Dependencies

Silent Dependencies controls whether Nessus runs prerequisite plugins quietly before dependent checks; it does not affect network congestion or packet throttling.

CConsider unscanned ports as closed

'Consider unscanned ports as closed' changes how Nessus infers port state for ports not explicitly tested; it does not monitor or respond to network congestion.

DReduce parallel connections on congestionCorrect

Nessus includes a 'Reduce parallel connections on congestion' option that uses TCP congestion signals to detect when the scanner is saturating the network link. When congestion is detected, Nessus reduces the number of simultaneous connections and the packet send rate to avoid overwhelming the network or causing false negatives from dropped responses. This is the specific setting designed to manage scan-induced network congestion.

Concept tested: Nessus scan throttling and congestion detection setting

Source: https://docs.tenable.com/nessus/Content/ScanAndPolicyTemplates.htm

Topics

#Nessus#vulnerability scanning#congestion control#scan settings

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice