Which Tool Identifies Insecure Ports and Legacy Protocols?
An auditor discovered multiple insecure ports on some servers. Other servers were found to have legacy protocols enabled. Which of the following tools did the auditor use to discover these issues?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests knowledge of vulnerability scanning tools and their purposes; the trap is confusing scanning tools like Nessus with network utilities like Wireshark or netcat.
The correct answer is A. Nessus, a vulnerability scanner that identifies insecure ports, legacy protocols, and misconfigurations. Community consensus confirms Nessus is designed for this discovery.
Choosing Wireshark is a common mistake because it captures network traffic, but it cannot actively scan servers for insecure ports or legacy protocol configurations like Nessus does.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Nessus is a widely used vulnerability scanner that performs network-based scans to identify open ports, insecure services, and legacy protocols. It is specifically designed to detect security issues and misconfigurations, making it the appropriate tool for the auditor's discovery.Why the Other Options Are Wrong
curl is a command-line tool for transferring data using URLs, not for scanning server configurations. Wireshark is a packet analyzer that captures and inspects network traffic, but it does not actively scan for vulnerabilities. netcat is a network utility for reading/writing raw data, often used for testing connectivity, not for comprehensive vulnerability assessment.Community Comment Notes
Community comments uniformly support A, with one noting that Nessus 'can identify insecure ports, legacy protocols, and other security issues on servers.' Another comment reinforces that Nessus 'finds potential vulnerabilities' whereas SIEMs monitor actual events, and another highlights its ability to scan networks and individual systems.Official Reference
Exam Strategy
Remember that vulnerability scanners like Nessus are used to identify configuration weaknesses such as insecure ports and legacy protocols. If a question mentions an auditor discovering multiple issues across servers, look for the vulnerability scanner option first.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →