Jim was having no luck performing a penetration test on his company’s network. He was running the test from home and had downloaded every security scanner he could lay his hands on. Despite knowing the IP range of all of the systems and the exact network configuration, Jim was unable to get any useful results. Why is Jim having these problems?
A.
Security scanners can’t perform vulnerability linkage
B.
Security Scanners are not designed to do testing through a firewall
C.
Security Scanners are only as smart as their database and can’t find unpublished vulnerabilities
D.
All of the above
Explanation:
Security scanners are designed to find vulnerabilities but not to use them, also they will only find well known vulnerabilities that and no zero day exploits. Therefore you can’t use a security scanner for penetration testing but need a more powerful program.