Exam CAS-005 topic 1 question 52 discussion

✅ B. Deploy an agent. 🔍 Explanation: When scanning multihomed systems (systems with multiple network interfaces), vulnerability scanners often detect the same vulnerabilities on each interface, causing duplicate entries. To accurately correlate vulnerabilities to a specific host and eliminate redundancy, the best approach is to: Deploy an agent on the host — this allows the scanner to: Identify the host uniquely regardless of its IP addresses. Access detailed system-level data (e.g., installed packages, patches). Avoid duplicate reporting across interfaces. ❌ Why the other options are incorrect: A. Use a SCAP scanner SCAP (Security Content Automation Protocol) is a standard, not a deduplication solution on its own. C. Initiate a discovery scan A discovery scan helps identify assets, but won’t resolve deduplication of vulnerabilities. D. Perform an Nmap scan Nmap can detect open ports and some vulnerabilities, but it doesn’t correlate host-level vulnerabilities like an agent would.