What is one of the limitations of the Nessus Network Monitor (NNM) related to active scans?

What is one of the limitations of the Nessus Network Monitor (NNM) related to active scans?

• A. Network deployment on several different Operating Systems
• B. Monitoring your network between active scans
• C. Identifying vulnerabilities in areas where you cannot actively scan
• D. Eliminating the need for active scans

Answer: (D)

The selected answer highlights a key limitation of the Nessus Network Monitor (NNM). While Nessus is capable of performing both active scanning and monitoring, it does not eliminate the need for active scans. Instead, NNM serves as a complementary tool that provides continuous monitoring of the network in between active scans. The necessity of active scans arises from the fact that they actively probe the network and devices to identify vulnerabilities at a specific point in time. Monitoring, on the other hand, keeps track of network activities, configurations, and potential changes without necessarily conducting these probing actions. Therefore, for a thorough security assessment, active scans are essential to capture vulnerabilities that may not be detected during passive monitoring alone. In contexts like compliance assessments or security audits, relying solely on monitoring would leave gaps in vulnerability detection and assessment. Thus, the NNM limitation underscores the importance of integrating both monitoring and scanning for effective security management.

The selected answer highlights a key limitation of the Nessus Network Monitor (NNM). While Nessus is capable of performing both active scanning and monitoring, it does not eliminate the need for active scans. Instead, NNM serves as a complementary tool that provides continuous monitoring of the network in between active scans.

The necessity of active scans arises from the fact that they actively probe the network and devices to identify vulnerabilities at a specific point in time. Monitoring, on the other hand, keeps track of network activities, configurations, and potential changes without necessarily conducting these probing actions. Therefore, for a thorough security assessment, active scans are essential to capture vulnerabilities that may not be detected during passive monitoring alone.

In contexts like compliance assessments or security audits, relying solely on monitoring would leave gaps in vulnerability detection and assessment. Thus, the NNM limitation underscores the importance of integrating both monitoring and scanning for effective security management.