Which term is used for a tool that scans systems to identify known weaknesses and exploitable conditions?

Which term is used for a tool that scans systems to identify known weaknesses and exploitable conditions?

• A. Penetration tester
• B. Packet sniffer
• C. Firewall
• D. Vulnerability scanner

Answer: (D)

Automated checks to identify known weaknesses in systems. A vulnerability scanner is a tool designed to inspect hosts, services, configurations, and software versions to detect missing patches, misconfigurations, default credentials, and other known exploitable conditions. It compares what’s running in the environment against a database of vulnerabilities and common misconfigurations, often assigning severity levels and providing remediation guidance. This makes it a core part of vulnerability management, helping security teams surface issues across large environments quickly and repeatedly. Penetration testers, on the other hand, are people who perform authorized simulated attacks to determine if vulnerabilities can be exploited in practice. A packet sniffer captures network traffic to analyze data in transit, not specifically to identify weaknesses. A firewall is a protective device designed to block or allow traffic based on rules, not to scan for vulnerabilities.

Automated checks to identify known weaknesses in systems. A vulnerability scanner is a tool designed to inspect hosts, services, configurations, and software versions to detect missing patches, misconfigurations, default credentials, and other known exploitable conditions. It compares what’s running in the environment against a database of vulnerabilities and common misconfigurations, often assigning severity levels and providing remediation guidance. This makes it a core part of vulnerability management, helping security teams surface issues across large environments quickly and repeatedly.

Penetration testers, on the other hand, are people who perform authorized simulated attacks to determine if vulnerabilities can be exploited in practice. A packet sniffer captures network traffic to analyze data in transit, not specifically to identify weaknesses. A firewall is a protective device designed to block or allow traffic based on rules, not to scan for vulnerabilities.