Match each vulnerability assessment tool to its function.
Drag a concept onto its matching description — or click a concept then click the description.
Automated vulnerability scanning
Open-source vulnerability scanner
Cloud-based vulnerability management
Network vulnerability scanner
Web server vulnerability scanner
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Nmap: Network port scanning and service detection
Correct matches: Nmap for network scanning, Nessus for vulnerability assessment, Metasploit for exploitation. Common confusions involve swapping scanning and vulnerability roles.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Nmap: Network port scanning and service detection
Why this is correct
Nmap (Network Mapper) is a powerful open-source utility for network discovery and security auditing. It uses raw IP packets to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, and what type of packet filters/firewalls are in use. Its primary function is to map out network topology and identify open ports and active services.
Nessus: Vulnerability scanning and risk assessment
Why this is correct
Nessus, developed by Tenable, is a widely recognized proprietary vulnerability scanner. It actively probes target systems for known vulnerabilities, misconfigurations, default credentials, and patch deficiencies across various operating systems, applications, and network devices. The tool then provides detailed reports, often including risk ratings and remediation suggestions, to help organizations prioritize and address identified security weaknesses effectively.
Metasploit: Penetration testing exploitation framework
Why this is correct
The Metasploit Framework is an open-source penetration testing platform that provides a comprehensive collection of exploits, payloads, and post-exploitation modules. It is designed to assist security professionals in identifying, exploiting, and validating vulnerabilities in systems and applications. This framework allows for the development, testing, and execution of exploit code against remote targets, simulating real-world attack scenarios to assess an organization's security posture.
Nmap: Vulnerability scanning and risk assessment
Why it's wrong here
This statement is incorrect because Nmap's primary function is network discovery, port scanning, and service enumeration, not comprehensive vulnerability scanning or risk assessment. While Nmap can identify open ports and service versions that might indicate potential vulnerabilities, it does not actively test for known exploits, misconfigurations, or provide detailed risk ratings like dedicated vulnerability scanners such as Nessus or OpenVAS. Its focus is on mapping the network landscape.
Nessus: Network port scanning and service detection
Why it's wrong here
This statement incorrectly attributes the function of network port scanning and service detection to Nessus. While Nessus performs some initial host discovery and port enumeration as part of its scanning process, its core purpose is to identify and report on specific vulnerabilities, misconfigurations, and compliance issues. Dedicated tools like Nmap are specifically designed and optimized for efficient and granular network port scanning and service version identification.
OpenVAS: Packet capture and analysis
Why it's wrong here
This statement is incorrect because OpenVAS (Open Vulnerability Assessment System) is a comprehensive open-source vulnerability scanner, similar in function to Nessus. Its primary role is to identify security weaknesses, misconfigurations, and unpatched software on target systems by performing active checks against a vast and regularly updated database of vulnerability tests. Packet capture and analysis, on the other hand, is the domain of tools like Wireshark, which passively monitor and dissect network traffic.
Go deeper
Learn chapter
Scanning Networks
Key term
Vulnerability assessment
A vulnerability assessment is a systematic review of security weaknesses in an information system, evaluating if the system is susceptible to any known vulnerabilities, assigning severity levels, and recommending remediation or mitigation.
Key term
Port Scanning Techniques
Port scanning techniques are methods used to probe a computer or network to discover which network ports are open and which services are running on those ports.
About these practice questions
This CEH question is part of Courseiva's 870-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.