312-50V11 · Question #480
Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?
The correct answer is B. Vulnerability scanner. A vulnerability scanner is the appropriate tool for conducting broad security audits across multiple network systems, as it actively identifies known weaknesses across hosts and services.
Question
Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?
Options
- AIntrusion Detection System
- BVulnerability scanner
- CPort scanner
- DProtocol analyzer
How the community answered
(21 responses)- A5% (1)
- B90% (19)
- D5% (1)
Why each option
A vulnerability scanner is the appropriate tool for conducting broad security audits across multiple network systems, as it actively identifies known weaknesses across hosts and services.
An Intrusion Detection System (IDS) passively monitors traffic for known attack signatures in real time but does not actively audit systems for vulnerabilities.
Vulnerability scanners (such as Nessus or OpenVAS) probe network systems for known CVEs, misconfigurations, missing patches, and weak credentials across a wide range of hosts and services. This broad, systematic assessment capability makes them the primary tool for security audits rather than tools focused on a single aspect of network monitoring.
A port scanner only identifies open TCP/UDP ports and running services; it does not assess whether those services are vulnerable or misconfigured.
A protocol analyzer (packet sniffer) captures and decodes network traffic for analysis but cannot evaluate the security posture of systems or identify unpatched vulnerabilities.
Concept tested: Vulnerability scanning for network security audits
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.