A _______ vulnerability scan would typically be focused on a specific set of requirements.

A full scan attempts to identify all vulnerabilities across a target without being constrained to any particular standard or requirement set.

A stealth scan is designed to minimize detection by security controls during the scanning process, not to evaluate compliance with requirements.

Compliance scans map discovered system configurations against specific benchmark requirements such as PCI-DSS, HIPAA, CIS Controls, or STIG checklists. Because they are driven by a defined requirements framework, they do not broadly hunt for all vulnerabilities - they only report findings relevant to satisfying or failing the targeted standard.

A discovery scan identifies live hosts, open ports, and running services to map the attack surface, not to assess adherence to a specific set of requirements.