Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?
A.
Use the built-in Windows Update tool
B.
Use a scan tool like Nessus
C.
Check MITRE.org for the latest list of CVE findings
D.
Create a disk image of a clean Windows installation
Nessus is an open-source network vulnerability scanner that uses the Common Vulnerabilities and Exposures architecture for easy cross-linking between compliant security tools. The Nessus server is currently available for Unix, Linux and FreeBSD. The client is available for Unix- or Windows-based operating systems. Note: Significant capabilities of Nessus include:
Compatibility with computers and servers of all sizes. Detection of security holes in local or remote hosts.
Detection of missing security updates and patches.
Simulated attacks to pinpoint vulnerabilities.
Execution of security tests in a contained environment.
Scheduled security audits.
References: http://searchnetworking.techtarget.com/definition/Nessus
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
JohanLondon
8 months, 4 weeks agoking777
1 year, 8 months agoANDRESCB1988
2 years, 9 months ago