Which approach targets discovering and identifying vulnerabilities that are not yet known to security staff?

Which approach targets discovering and identifying vulnerabilities that are not yet known to security staff?

• A. Host-Based Vulnerability Assessment Tools
• B. Automated Assessment
• C. Manual Assessment
• D. Depth Assessment Tools

Answer: (A)

Focusing on the actual state of each endpoint helps uncover weaknesses that security staff may not yet know about. Host-based vulnerability assessment tools examine a system directly—checking installed patches, running services, misconfigurations, user accounts, and file permissions on that host. By evaluating how the machine is configured and what software and settings are present, these tools reveal vulnerabilities that haven’t been identified or documented by the team, including exposures that aren’t apparent at a network level or through general scans. This approach is especially good for spotting issues like missing patches, insecure configurations, or unnecessary services that create risk on the specific host, which might be missed by broader automated scans or by manual testing alone. Automated or network-focused assessments are valuable for breadth and speed, but they don’t always capture the exact, local weaknesses baked into a single machine’s configuration. Manual testing can find things too, but it depends on tester knowledge and may not scale to cover every host. Depth tools are less clearly defined in this context, so the most direct fit for uncovering unknown host-specific weaknesses is the host-based approach.

Focusing on the actual state of each endpoint helps uncover weaknesses that security staff may not yet know about. Host-based vulnerability assessment tools examine a system directly—checking installed patches, running services, misconfigurations, user accounts, and file permissions on that host. By evaluating how the machine is configured and what software and settings are present, these tools reveal vulnerabilities that haven’t been identified or documented by the team, including exposures that aren’t apparent at a network level or through general scans.

This approach is especially good for spotting issues like missing patches, insecure configurations, or unnecessary services that create risk on the specific host, which might be missed by broader automated scans or by manual testing alone. Automated or network-focused assessments are valuable for breadth and speed, but they don’t always capture the exact, local weaknesses baked into a single machine’s configuration. Manual testing can find things too, but it depends on tester knowledge and may not scale to cover every host. Depth tools are less clearly defined in this context, so the most direct fit for uncovering unknown host-specific weaknesses is the host-based approach.