During a recent audit, it was discovered that many services and desktops were missing security patches. Which of the following BEST describes the assessment that was performed to discover this issue?

Network mapping is used to discover devices, their connections, and the topology of a network, not to assess their patch status or vulnerabilities.

A vulnerability scan is specifically designed to identify security weaknesses, misconfigurations, and missing security updates or patches on systems, services, and applications. These scans compare the target system's current state against a database of known vulnerabilities and patch requirements, directly addressing the discovery of 'missing security patches'.

A port scan identifies which ports are open on a host, indicating active services, but does not determine if those services have missing security patches.

Protocol analysis involves capturing and interpreting network traffic to understand communication patterns, troubleshoot issues, or detect anomalies, not to find missing security patches on endpoints.