nerdexam
Isaca

CISM · Question #361

Which of the following is the MOST likely reason for a vulnerability scanner to return incomplete results?

The correct answer is A. Unauthenticated vulnerability scans are being performed. Unauthenticated scans often return incomplete results because they lack the necessary permissions to access and assess deeper system configurations, services, and applications. Providing authentication credentials allows the scanner to perform a more thorough evaluation of…

Submitted by takeshi77· Apr 18, 2026Information Security Risk Management

Question

Which of the following is the MOST likely reason for a vulnerability scanner to return incomplete results?

Options

  • AUnauthenticated vulnerability scans are being performed.
  • BHost names have not been fully enumerated.
  • CScan results are not ingested into a security information and event management (SIEM) tool.
  • DZero-day vulnerability signatures have not been ingested.

How the community answered

(56 responses)
  • A
    91% (51)
  • C
    5% (3)
  • D
    4% (2)

Explanation

Unauthenticated scans often return incomplete results because they lack the necessary permissions to access and assess deeper system configurations, services, and applications. Providing authentication credentials allows the scanner to perform a more thorough evaluation of vulnerabilities.

Topics

#Vulnerability Scanning#Security Assessment#Unauthenticated Scans#Risk Identification

Community Discussion

No community discussion yet for this question.

Full CISM Practice