What is the primary purpose of a compliance assessment in Tenable Vulnerability Management?

• A. To evaluate the financial performance of an organization.
• B. To measure whether a host or set of hosts are configured to align with specific benchmarks.
• C. To assess the physical security measures of a host environment.
• D. To measure the performance speed of a host or set of host

Answer: (B)

Compliance assessments in Tenable Vulnerability Management focus on whether a host or group of hosts are configured to meet defined standards or benchmarks. This means checking system settings against published baselines (like CIS Benchmarks, STIGs, or organizational policies) and rating each system as compliant or non-compliant. The goal is to detect configuration drift, provide auditable evidence, and guide remediation so systems align with required security and regulatory controls. It’s not about financial performance, physical security measures, or how fast a system runs.