nerdexam
EC-Council

312-50V9 · Question #112

Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

The correct answer is D. Reduce parallel connections on congestion. The 'Reduce parallel connections on congestion' setting in Nessus monitors network throughput and automatically throttles scan intensity when the network pipe approaches capacity.

Vulnerability Analysis

Question

Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

Options

  • ANetstat WMI Scan
  • BSilent Dependencies
  • CConsider unscanned ports as closed
  • DReduce parallel connections on congestion

How the community answered

(19 responses)
  • C
    5% (1)
  • D
    95% (18)

Why each option

The 'Reduce parallel connections on congestion' setting in Nessus monitors network throughput and automatically throttles scan intensity when the network pipe approaches capacity.

ANetstat WMI Scan

Netstat WMI Scan is a setting that uses Windows Management Instrumentation to enumerate open ports and active connections on Windows hosts, and has no relation to detecting or managing network congestion caused by the scanner.

BSilent Dependencies

Silent Dependencies is a Nessus plugin behavior setting that suppresses execution of plugins whose prerequisite checks have not been satisfied, which is unrelated to controlling scan-induced network congestion.

CConsider unscanned ports as closed

'Consider unscanned ports as closed' instructs Nessus to treat any port not explicitly scanned as closed when evaluating plugin logic, and provides no mechanism for detecting or responding to network congestion.

DReduce parallel connections on congestionCorrect

This Nessus advanced scan setting enables the scanner to detect TCP congestion signals such as dropped packets or increased round-trip latency and dynamically reduce the number of concurrent connections being opened. By throttling parallel connections in response to congestion cues, Nessus prevents itself from saturating the network pipe and avoids causing false negatives or network disruptions during the scan.

Concept tested: Nessus scan throttling and congestion detection settings

Source: https://docs.tenable.com/nessus/Content/ScanSettings.htm

Topics

#Nessus#vulnerability scanning#congestion control#packet throttling

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice