What is the purpose of performing service and OS discovery during vulnerability scanning?

• A. To investigate the network topology.
• B. To enumerate open ports and identify the operating system on target systems.
• C. To patch all known vulnerabilities automatically.
• D. To monitor user login activity.

Answer: (B)

The goal of service and operating system discovery in vulnerability scanning is to identify which ports are open on each host and what OS is running, so the scanner can apply the right checks and tailor the assessment to the actual environment. By fingerprinting active services and their versions, you map the attack surface accurately, reduce false positives, and choose the most relevant vulnerability tests for each target. Knowing the OS and services also helps prioritize findings based on exposure and exploitability for that specific platform.

This isn’t about mapping the network just for layout, nor about automatically patching everything or monitoring user logins. Discovery informs what exists on the hosts, which is essential before any effective vulnerability assessment and remediation planning.