A network manager wants a monthly report of the security posture of all the assets on the network (e.g.
workstations, servers, routers, switches, firewalls). The report should include any feature of a system or
appliance that is missing a security patch, OS update, etc. and the severity of risk that is associated with the
missing update or patch. Which of the following solutions would work BEST to present this data?

A.
Security policy

B.
Penetration scan

C.
Virus scan

D.
Vulnerability scanner