Which of the following is the most appropriate action a security analyst to take to effectively identify the most security risks associated with a locally hosted server?

Question

Options

• ARun the operating system update tool to apply patches that are missing.
• BContract an external penetration tester to attempt a brute-force attack.
• CDownload a vendor support agent to validate drivers that are installed.
• DExecute a vulnerability scan against the target host.

• A
  5% (1)
• B
  5% (1)
• C
  14% (3)
• D
  77% (17)

Explanation

Vulnerability Scanning for Risk Identification

Executing a vulnerability scan (Option D) is the most appropriate action because it systematically enumerates and assesses a wide range of security weaknesses - including misconfigurations, missing patches, open ports, and outdated software - providing a comprehensive risk profile of the target host in a single, structured process.

Why the distractors are wrong:

• Option A (applying patches) is a remediation action, not an identification action - you must first discover vulnerabilities before fixing them
• Option B (brute-force penetration testing) is too narrow in scope, targeting only authentication weaknesses rather than broadly identifying all risks; it is also typically used after vulnerability scanning
• Option C (validating drivers) addresses only a small subset of potential issues and is a maintenance task, not a security risk identification process

Memory Tip: Think of the security workflow as "Scan → Analyze → Remediate." A vulnerability scan always comes first when you need to identify risks - it's your security "snapshot" of the system. If the question asks about finding or identifying risks, a vulnerability scan is almost always the answer.

No community discussion yet for this question.