An administrator would like to search for network vulnerabilities on servers, routers, and embedded appliances. Which of the following tools would MOST likely accomplish this?

A baseline analyzer compares the current state of a system against a known-good benchmark - it identifies deviations from a baseline rather than actively probing for specific vulnerabilities.

Ping uses ICMP echo requests to test basic Layer 3 reachability and round-trip latency - it provides no vulnerability information about the target.

A protocol analyzer (such as Wireshark) captures and decodes network traffic passively - it does not actively probe devices to identify security vulnerabilities.

Nessus, developed by Tenable, is an industry-standard vulnerability assessment tool that uses a large plugin database to scan for misconfigurations, missing patches, and known CVEs across servers, network devices, and embedded systems. It performs credentialed and uncredentialed scans, making it the appropriate tool for comprehensive network vulnerability discovery.