What is the recommended approach for discovering vulnerabilities on a Windows-based computer?

• A. Manually review code
• B. Rely on antivirus alone
• C. Use a scan tool like Nessus
• D. Wait for automatic updates

Answer: (C)

Discovering vulnerabilities on a Windows machine is best done with a dedicated vulnerability scanner. A scan tool like Nessus systematically checks the system against a large database of known weaknesses, missing patches, misconfigurations, and insecure service settings. It can perform both network-based and host-based checks and, when run with valid credentials, can dive deeper to reveal issues that aren’t visible from the outside. This approach provides a prioritized report with concrete remediation steps, which is essential for effective risk management.

Manual code review isn’t practical for evaluating an entire Windows endpoint’s vulnerability surface, since it targets software source code rather than OS configurations and installed applications. Relying on antivirus alone addresses malware detection, not the underlying exposure from missing patches or misconfigurations. Waiting for automatic updates only patches issues after they’re found and doesn’t provide an upfront assessment of the system’s current vulnerabilities.