nerdexam
GIAC

GPEN · Question #13

You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task? Each correct answer represents a complete solution. Choose tw

The correct answer is A. Restart nessusd service. D. Place the directory containing nikto.pl in root's PATH environment variable.. Integrating Nikto with Nessus requires making nikto.pl accessible to the Nessus daemon running as root, then restarting the service to apply changes.

Vulnerability Discovery & Scanning

Question

You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task? Each correct answer represents a complete solution. Choose two.

Options

  • ARestart nessusd service.
  • BPlace nikto.pl file in the /var/www directory.
  • CPlace nikto.pl file in the /etc/nessus directory.
  • DPlace the directory containing nikto.pl in root's PATH environment variable.

How the community answered

(33 responses)
  • A
    85% (28)
  • B
    6% (2)
  • C
    9% (3)

Why each option

Integrating Nikto with Nessus requires making nikto.pl accessible to the Nessus daemon running as root, then restarting the service to apply changes.

ARestart nessusd service.Correct

The nessusd daemon must be restarted after configuration changes so it re-reads its environment and picks up the newly accessible Nikto script during subsequent scans.

BPlace nikto.pl file in the /var/www directory.

/var/www is the default web server document root and is not a directory that the Nessus daemon searches for external tool binaries or plugins.

CPlace nikto.pl file in the /etc/nessus directory.

/etc/nessus stores Nessus configuration and policy files, not third-party scanner executables like nikto.pl.

DPlace the directory containing nikto.pl in root's PATH environment variable.Correct

Because Nessus executes external tools as root, placing the directory containing nikto.pl in root's PATH environment variable allows the Nessus daemon to locate and invoke Nikto automatically.

Concept tested: Integrating Nikto external tool with Nessus scanner

Source: https://docs.tenable.com/nessus/Content/NessusUserGuide.htm

Topics

#Nikto#Nessus integration#vulnerability scanner#tool configuration

Community Discussion

No community discussion yet for this question.

Full GPEN Practice