Which of the following best describes Nikto's vulnerability assessment scope?

• A. To monitor network performance.
• B. To perform SQL injection.
• C. To benchmark CPU usage.
• D. To identify dangerous files, outdated software, and potential security issues on web servers.

Answer: (D)

Nikto is a web server vulnerability scanner designed to uncover what could be risky on a web server by checking for known issues. It looks for dangerous files and directories, outdated server software, and common misconfigurations that could expose a site to attacks. This scope means it inventories weaknesses rather than performing exploits or measuring performance.

That’s why identifying dangerous files, outdated software, and potential security issues on web servers is the best description. It doesn’t focus on monitoring network performance, it isn’t a tool for carrying out SQL injection, and it doesn’t benchmark CPU usage.