Study. uk . com
  1. Home
  2. All questions
  3. Question 387

CISSP study material · question 387 of 500

Which findings does SP 800-115 say a vulnerability scanner can produce? Choose three.

  1. Misconfigurations, and compliance with or deviation from security policy.
  2. Outdated software versions.
  3. Proof that a weakness is exploitable in the target environment.
  4. Missing patches.
Show the answer

Answer: D. Missing patches.
A. Misconfigurations, and compliance with or deviation from security policy.
B. Outdated software versions.

Vulnerability scanning helps identify outdated software versions, missing patches and misconfigurations, and validates compliance with or deviations from policy. Proving exploitability is the job of validation techniques.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 4.3 Vulnerability Scanning

Challenge yourself on this topic → Study as cards