QuestionQ53

Vulnerability Management

An analyst needs to perform a baseline security evaluation of the company's cloud infrastructure. Which of the following tools is most appropriate for this task?

  • A Open Vulnerability Assessment Scanner (OpenVAS)
  • B Nikto
  • C ScoutSuite
  • D Metasploit
Explanation

ScoutSuite is an open-source multi-cloud security auditing tool designed to assess the security configuration of cloud environments such as AWS, Azure, and GCP by pulling configuration data via cloud provider APIs and highlighting risky settings. This makes it purpose-built for baseline cloud security assessments, unlike OpenVAS and Nikto, which are general vulnerability and web server scanners for network/host or web-application targets, or Metasploit, which is an exploitation framework rather than a configuration assessment tool.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!