nerdexam
GIAC

GCIH · Question #320

Which of the following tools is described in the statement given below? "It has a database containing signatures to be able to detect hundreds of vulnerabilities in UNIX, Windows, and commonly used…

The correct answer is B. Nessus. Nessus is a widely used vulnerability scanner that uses a signature database to detect vulnerabilities across UNIX, Windows, web CGI scripts, DDoS zombies, and Trojans.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following tools is described in the statement given below? "It has a database containing signatures to be able to detect hundreds of vulnerabilities in UNIX, Windows, and commonly used web CGI scripts. Moreover, the database detects DdoS zombies and Trojans as well."

Options

  • ASARA
  • BNessus
  • CAnti-x
  • DNmap

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    91% (31)
  • C
    3% (1)

Why each option

Nessus is a widely used vulnerability scanner that uses a signature database to detect vulnerabilities across UNIX, Windows, web CGI scripts, DDoS zombies, and Trojans.

ASARA

SARA (Security Auditor's Research Assistant) is a vulnerability scanner but has a narrower scope and is not known for DDoS zombie or Trojan detection via a signature database.

BNessusCorrect

Nessus, developed by Tenable, is a comprehensive vulnerability assessment tool that maintains a large plugin-based signature database used to detect thousands of vulnerabilities across multiple operating systems including UNIX and Windows, as well as web CGI scripts. It also includes checks for DDoS zombie agents and Trojan backdoors. This combination of broad platform coverage and malware detection matches the description precisely.

CAnti-x

Anti-x is not a recognized standard vulnerability scanning tool associated with the described signature-based detection capabilities for UNIX, Windows, CGI, and DDoS zombies.

DNmap

Nmap is a network discovery and port scanning tool, not a vulnerability scanner with a signature database for detecting CGI flaws, Trojans, or DDoS zombies.

Concept tested: Nessus vulnerability scanner capabilities and use case

Source: https://docs.tenable.com/nessus/Content/GetStarted.htm

Topics

#Nessus#vulnerability scanner#signature database#CGI vulnerability detection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice