A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this risk. Which of the…

Question

Options

• APacket capture
• BVulnerability scan
• CMetadata analysis
• DAutomated reporting

• A
  4% (2)
• B
  83% (38)
• C
  2% (1)
• D
  11% (5)

Explanation

Vulnerability scanning is the right tool here because it systematically probes all systems in an environment to identify which ones have known CVEs, missing patches, or misconfigured components - exactly what the administrator needs to assess exposure from a newly disclosed CVE.

Packet capture (A) records network traffic in transit; it can't tell you which hosts are running a vulnerable version of software. Metadata analysis (C) examines file or data attributes and has no mechanism to detect vulnerable software versions across a fleet. Automated reporting (D) is an output mechanism, not a discovery tool - you can't report on vulnerabilities you haven't yet found.

Memory tip: Think "CVE disclosed → who's affected?" - that's a scan, not a sniff (packet capture), not a metadata read, and not a report. Vulnerability scanners compare installed software versions against CVE databases, which is precisely what the scenario demands.

No community discussion yet for this question.