Which assessment relies on vulnerability scanning tools such as Nessus, Qualys, or GFI LanGuard to automate checks?

Which assessment relies on vulnerability scanning tools such as Nessus, Qualys, or GFI LanGuard to automate checks?

• A. Host-Based Vulnerability Assessment Tools
• B. Automated Assessment
• C. Product-Based Solutions
• D. Inference-Based Assessment

Answer: (B)

Automated assessment is about using automation to check for vulnerabilities across systems. Tools like Nessus, Qualys, and GFI LanGuard are designed to automatically probe networks, hosts, and services for known weaknesses, missing patches, misconfigurations, and policy violations. They run standardized checks against up-to-date vulnerability databases and generate reports that help prioritize remediation, enabling quick, consistent assessments across large environments without manual testing of every asset. Host-based vulnerability assessment focuses on checks run on a single machine via an agent, rather than scanning across many assets. Inference-based assessment relies on deducing risk from indirect data rather than automated vulnerability checks. Product-based solutions describe specific tools or vendors rather than the assessment approach.

Automated assessment is about using automation to check for vulnerabilities across systems. Tools like Nessus, Qualys, and GFI LanGuard are designed to automatically probe networks, hosts, and services for known weaknesses, missing patches, misconfigurations, and policy violations. They run standardized checks against up-to-date vulnerability databases and generate reports that help prioritize remediation, enabling quick, consistent assessments across large environments without manual testing of every asset.

Host-based vulnerability assessment focuses on checks run on a single machine via an agent, rather than scanning across many assets. Inference-based assessment relies on deducing risk from indirect data rather than automated vulnerability checks. Product-based solutions describe specific tools or vendors rather than the assessment approach.