Which NSE script category would you specify to perform a broad vulnerability check?

• A. exploit
• B. vuln
• C. safe
• D. discovery

Answer: (B)

In NSE, scripts are grouped into categories that indicate their purpose. For a broad vulnerability check, you want the vulnerability-focused category because those scripts are designed to probe for known weaknesses and misconfigurations across services, helping you assess risk without performing exploits. The vuln category targets CVEs, version/patch gaps, and common security misconfigurations, making it the right fit for scanning capabilities. Using the exploit category would attempt active exploitation, which is risky and intrusive. Safe scripts are non-invasive and meant for cautious checks, while discovery scripts focus on identifying hosts and services rather than vulnerabilities. So, the vuln category is the best choice for broad vulnerability assessment.