312-50V11 · Question #338
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?
The correct answer is D. Reduce parallel connections on congestion. Nessus's 'Reduce parallel connections on congestion' setting detects network congestion signals and automatically throttles scan traffic when the network pipe approaches capacity.
Question
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?
Options
- ANetstat WMI Scan
- BSilent Dependencies
- CConsider unscanned ports as closed
- DReduce parallel connections on congestion
How the community answered
(19 responses)- B5% (1)
- C5% (1)
- D89% (17)
Why each option
Nessus's 'Reduce parallel connections on congestion' setting detects network congestion signals and automatically throttles scan traffic when the network pipe approaches capacity.
The Netstat WMI Scan setting uses Windows Management Instrumentation to enumerate open connections and ports on Windows hosts, and is unrelated to detecting or managing network congestion.
Silent Dependencies is a plugin behavior setting that suppresses prerequisite plugin results from scan reports, and has no function related to network traffic monitoring or congestion detection.
The 'Consider unscanned ports as closed' setting changes how Nessus interprets unreached ports for vulnerability assessment purposes, and does not monitor or throttle network packet rates.
The 'Reduce parallel connections on congestion' setting monitors the network for congestion indicators - such as TCP RST responses indicating dropped connections - and dynamically reduces the number of parallel scan connections in response. This prevents the scanner from overwhelming the network and allows Nessus to adapt its scan rate to available bandwidth without manual intervention.
Concept tested: Nessus scan throttling and congestion detection settings
Source: https://docs.tenable.com/nessus/Content/Advanced.htm
Topics
Community Discussion
No community discussion yet for this question.