What does a network vulnerability assessment intend to identify?

A. 0-day vulnerabilities

B. Malicious software and spyware

C. Security design flaws

D. Misconfiguration and missing updates

Explanation:

A network vulnerability assessment intends to identify known vulnerabilities based on common misconfigurations and missing updates. 0-day vulnerabilities by definition are not previously known and therefore are undetectable. Malicious software and spyware are normally addressed through antivirus and antispyware policies. Security design flaws require a deeper level of analysis.