Study. uk . com
  1. Home
  2. All questions
  3. Question 137

CompTIA Security+ study material · question 137 of 611

An organisation scans only the hosts in its asset inventory. What kind of exposure does this method structurally miss?

  1. Vulnerabilities scored below 4.0
  2. Weaknesses in third-party libraries
  3. Hosts that exist but were never inventoried
  4. Flaws requiring authenticated access
Show the answer

Answer: C. Hosts that exist but were never inventoried

Network discovery establishes what exists; scanning only the known list cannot find the forgotten host.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 4.1 Network Discovery

Challenge yourself on this topic → Study as cards