Craig received a report of all the computers on the network that showed all the missing patches and weak passwords. What type of software generated this report?

A port scanner only identifies which network ports are open on a host, not missing patches or weak passwords.

A vulnerability scanner actively probes networked systems to detect known security weaknesses, including missing OS and application patches, misconfigured services, and weak or default passwords, then generates detailed reports for remediation. Tools like Nessus, OpenVAS, and Qualys are examples of vulnerability scanners that produce exactly this type of comprehensive security posture report.

A virus scanner detects known malware signatures on a system and does not assess patch levels or password strength.

A malware scanner identifies malicious software, not configuration weaknesses like missing patches or weak credentials.