CAS-004 Practice Question: Drag and drop the steps to perform a…

Drag and drop the steps to perform a vulnerability scan using Nessus into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Configure policy, then set targets, then run scan, then review results, then report.

Vulnerability scanning: configure policy, set targets, run scan, review results, and report.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Configure policy, then set targets, then run scan, then review results, then report.
Why this is correct
This is the correct order because you must first define the scanning policy (e.g., plugins, credentials), then specify the targets (IPs, hosts), execute the scan, analyze the results for vulnerabilities, and finally create a report.
✗
Set targets, then configure policy, then run scan, then review results, then report.
Why it's wrong here
This is incorrect because you need to have a scanning policy in place before selecting targets; otherwise, the scan may lack necessary configuration.
✗
Configure policy, then run scan, then set targets, then review results, then report.
Why it's wrong here
This is incorrect because you cannot run a scan without first specifying the targets; the scan would have nothing to scan.
✗
Configure policy, then set targets, then review results, then run scan, then report.
Why it's wrong here
This is incorrect because you must run the scan before reviewing results; otherwise, there are no results to review.

Go deeper