Which of the following is BEST utilized to identify common misconfigurations throughout the enterprise?

Question

Options

• AVulnerability scanning
• BPort scanning
• CPenetration testing
• DBlack box

• A
  91% (52)
• B
  5% (3)
• C
  2% (1)
• D
  2% (1)

Explanation

Vulnerability scanning (A) uses automated tools to probe systems across the entire enterprise against a database of known vulnerabilities, weak configurations, missing patches, and security policy violations. Because it is automated and scalable, it efficiently identifies common misconfigurations (open ports, default credentials, disabled security features, etc.) across thousands of hosts. Port scanning (B) identifies which ports are open on a host but does not assess configuration correctness. Penetration testing (C) is a targeted, manual effort to actively exploit weaknesses - valuable but not designed for broad misconfiguration discovery. Black box (D) describes a penetration testing methodology where the tester has no prior knowledge of the environment; it is a technique style, not a tool for systematic misconfiguration auditing.

No community discussion yet for this question.