Which of the following can be customized in a Host Discovery scan to adapt to network conditions?

Prepare for the Tenable Vulnerability Management Specialist Test. Ace the exam with flashcards and multiple choice questions, each with detailed explanations. Ensure your success today!

Multiple Choice

Which of the following can be customized in a Host Discovery scan to adapt to network conditions?

Host discovery identifies live hosts by sending probe packets, and you can tailor these probes to fit the network environment. The key customization is choosing which ping methods to use, since different networks block or allow different traffic. Enabling or disabling ICMP, ARP, or TCP ping lets discovery work around firewalls, ACLs, or segmentation. For example, if ICMP is blocked by a firewall, ARP or TCP-based probes may still reveal hosts, while on a flat LAN ARP can quickly identify devices. The other options aren’t part of host discovery: choosing port numbers to test belongs to port/service scanning, OS patch level is something gathered during vulnerability assessment or inventory, and credentialed remote login is used for authenticated scans, not discovery.

Host discovery identifies live hosts by sending probe packets, and you can tailor these probes to fit the network environment. The key customization is choosing which ping methods to use, since different networks block or allow different traffic. Enabling or disabling ICMP, ARP, or TCP ping lets discovery work around firewalls, ACLs, or segmentation. For example, if ICMP is blocked by a firewall, ARP or TCP-based probes may still reveal hosts, while on a flat LAN ARP can quickly identify devices. The other options aren’t part of host discovery: choosing port numbers to test belongs to port/service scanning, OS patch level is something gathered during vulnerability assessment or inventory, and credentialed remote login is used for authenticated scans, not discovery.

More practice questions