Which tool can scan for vulnerabilities and offers exploit code to compromise a target?

• A. Nessus
• B. OpenVAS
• C. Core Impact
• D. Qualys

Answer: (C)

This question tests the ability to identify a tool that not only finds vulnerabilities but also provides exploit code to compromise a target. Core Impact is designed as a penetration testing platform that includes both vulnerability scanning and an integrated exploit framework. It can locate weaknesses and then deliver exploit code to verify exploitability and demonstrate a real compromise within a controlled, authorized engagement. This combination of detection and actionable exploitation distinguishes it from pure scanners.

Nessus, OpenVAS, and Qualys are primarily vulnerability scanners. They focus on identifying and reporting weaknesses but do not generally supply exploit payloads to compromise a system within the same tool.