Which of the following tools can be used as penetration tools in the Information system auditing process? Each correct answer represents a complete solution. Choose two.

Nmap is a network discovery and port scanning tool used primarily in the reconnaissance phase, not a full penetration or vulnerability assessment tool for IS auditing.

Snort is a network intrusion detection and prevention system (IDS/IPS) designed for defense and traffic analysis, not for offensive penetration testing.

SARA (Security Auditor's Research Assistant) is a network security analysis tool that identifies vulnerabilities in a target environment, making it a direct penetration/auditing tool.

Nessus is an industry-standard vulnerability scanner that performs credentialed and uncredentialed scans to enumerate security weaknesses, widely used in formal IS auditing and penetration testing.