nerdexam
CompTIA

CS0-003 · Question #125

A Chief Information Security Officer has asked for a list of hosts that have critical and high- seventy findings as referenced in the CVE database. Which of the following tools would produce the…

The correct answer is A. Nessus. Nessus is a widely recognized vulnerability scanner capable of identifying system vulnerabilities and mapping them to CVEs, providing the requested assessment output.

Submitted by yousef_jo· Mar 6, 2026Vulnerability Management

Question

A Chief Information Security Officer has asked for a list of hosts that have critical and high- seventy findings as referenced in the CVE database. Which of the following tools would produce the assessment output needed to satisfy this request?

Options

  • ANessus
  • BNikto
  • CFuzzer
  • DWireshark
  • EProwler

How the community answered

(19 responses)
  • A
    89% (17)
  • B
    5% (1)
  • E
    5% (1)

Why each option

Nessus is a widely recognized vulnerability scanner capable of identifying system vulnerabilities and mapping them to CVEs, providing the requested assessment output.

ANessusCorrect

Nessus is a comprehensive vulnerability scanner that can scan network devices, operating systems, and applications to identify security vulnerabilities, misconfigurations, and weaknesses, often correlating findings with CVE (Common Vulnerabilities and Exposures) IDs and assigning severity levels. This directly fulfills the CISO's request for a list of hosts with critical/high severity CVE findings.

BNikto

Nikto is a web server scanner focused on identifying known web server vulnerabilities, misconfigurations, and outdated software, but it's not a general-purpose host vulnerability scanner for the entire infrastructure.

CFuzzer

A Fuzzer is a tool used for software testing to discover bugs and vulnerabilities by inputting large amounts of random data; it's not designed to scan for known CVEs on hosts across a network.

DWireshark

Wireshark is a network protocol analyzer used for capturing and inspecting network traffic, not for vulnerability scanning of hosts.

EProwler

Prowler is a tool specifically for AWS security best practices assessments, not a general-purpose vulnerability scanner for on-premises or other cloud hosts referencing CVEs.

Concept tested: Vulnerability scanning tools

Source: https://www.tenable.com/products/nessus/documentation

Topics

#vulnerability scanning#Nessus#CVE

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice