In short
Vulnerability scanning uses automated tools to check systems for known weaknesses, such as missing patches, outdated software and insecure settings.
Key takeaways
- Scans should run regularly and after significant changes.
- Results are prioritized by severity and fixed through patch and configuration management.
- Penetration testing goes further by trying to exploit the weaknesses.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
How does a penetration test differ from a vulnerability scan?