Which of the following is an industry-standard tool commonly used for vulnerability scanning?

Nessus is a widely recognized and industry-standard remote security scanning tool. It scans a computer, network, or other assets to identify vulnerabilities that malicious actors could exploit. Its primary function is to detect potential security weaknesses, such as unpatched services, software flaws, and configuration errors, before they can be compromised. Developed by Tenable, Nessus is one of the most popular vulnerability scanners used by cybersecurity professionals for vulnerability assessments and penetration testing engagements. Its extensive plugin library allows it to detect a vast range of vulnerabilities across various operating systems, network devices, and applications.

McAfee Endpoint Security is primarily an endpoint protection platform (EPP) focused on antivirus, anti-malware, and host-based firewall functions, not a dedicated network vulnerability scanner.

Apache HTTP Server is a web server software. It is a common target of vulnerability scans, not a tool used to perform them.

Microsoft Excel is a spreadsheet application used for data organization and analysis; it has no capabilities for performing security or vulnerability scanning.

1. Official Vendor Documentation (CISCO): Santos, O., Muniz, J., & De Crescenzo, S. (2017). CCNA CyberOps SECFND 210-250 Official Cert Guide. Cisco Press. In Chapter 11, "Security Monitoring," the text explicitly identifies Nessus as a popular vulnerability scanner used to identify vulnerabilities, misconfigurations, and missing patches in a network.

2. Peer-reviewed Academic Publications (NIST): Scarfone, K., & Mell, P. (2008). Technical Guide to Information Security Testing and Assessment (NIST Special Publication 800-115). National Institute of Standards and Technology. Section 5.3, "Vulnerability Scanning," discusses the process and tools, with Nessus being a frequently cited example of a comprehensive vulnerability scanning tool in government and industry publications.

3. University Courseware: Zeldovich, N., & Kaashoek, F. (2014). 6.858 Computer Systems Security, Fall 2014. Massachusetts Institute of Technology: MIT OpenCourseWare. Lecture 1 notes, "Introduction: threat models," list Nessus as a prime example of a vulnerability scanner used to find known security holes in network services.