Which term refers to a synchronizable list of data and scripts used to check for vulnerabilities and is also known as plug-ins or network vulnerability tests (NVTs)?

Which term refers to a synchronizable list of data and scripts used to check for vulnerabilities and is also known as plug-ins or network vulnerability tests (NVTs)?

• A. Vulnerability database
• B. Vulnerability feed
• C. Security scanner
• D. Threat intelligence feed

Answer: (B)

This concept centers on the collection of tests and data that a security scanner downloads and keeps in sync to probe systems for vulnerabilities. Those tests are implemented as plug-ins, and they’re often called Network Vulnerability Tests (NVTs). The bundle of these runnable tests and the accompanying data is known as the vulnerability feed, which is updated regularly so the scanner can detect recently disclosed vulnerabilities. A vulnerability database tends to be a static repository of known issues rather than a live set of runnable checks, while a security scanner is the tool that uses the feed to perform checks, and a threat intelligence feed covers external indicators of threats rather than the vulnerability tests themselves.

This concept centers on the collection of tests and data that a security scanner downloads and keeps in sync to probe systems for vulnerabilities. Those tests are implemented as plug-ins, and they’re often called Network Vulnerability Tests (NVTs). The bundle of these runnable tests and the accompanying data is known as the vulnerability feed, which is updated regularly so the scanner can detect recently disclosed vulnerabilities. A vulnerability database tends to be a static repository of known issues rather than a live set of runnable checks, while a security scanner is the tool that uses the feed to perform checks, and a threat intelligence feed covers external indicators of threats rather than the vulnerability tests themselves.