Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions…

Armitage is a graphical cyber attack management interface and visualization tool for the Metasploit Framework, not a misconfiguration scanner.

Nikto is specifically designed for web server reconnaissance and auditing - it checks for over 6700 potentially dangerous files and programs, outdated server versions, version-specific problems, and server misconfiguration issues such as index files and HTTP options. This matches exactly what the scenario describes: scanning for common misconfigurations and outdated software. It is the industry-standard tool for this specific web audit task and would be the natural first step in a white-hat web security engagement.

Metasploit is an exploitation framework used to develop, test, and execute exploits against targets, not to passively scan for misconfigurations.

Nmap is a network port scanner and host discovery tool focused on network topology and open services, not web-application-level misconfigurations.