The results of a basic compliance scan show a subset of assets on a network. This data differs from what is shown on the network architecture diagram, which was supplied at the beginning of the…

Storage systems such as SANs or NAS devices often reside on dedicated storage VLANs or fabric networks isolated from the general IP network, making them invisible to a basic compliance scanner that only has access to the primary network segment.

If the scanner is provisioned with limited network access - such as a single DHCP address on one VLAN - it cannot discover or scan assets residing on other subnets or network segments, producing an incomplete asset inventory compared to the full architecture diagram.

A misconfigured DHCP server would affect IP address assignment for endpoints but would not reduce the number of devices visible to a network scanner that has already obtained connectivity.

Incorrect credentials would cause authentication or enumeration failures on discovered hosts but would not prevent the scanner from detecting that those hosts exist on the network.

Network access controls could restrict scanner traffic in ways that overlap with limited network access, but as a distinct answer choice it is less precisely the root cause compared to B, which directly describes the scanner's constrained network reach.