Question

A company has shifted to a permanent remote-work model, and most laptops now rarely connect to the corporate network or VPN. The security team notices that their traditional network-based vulnerability scanner reports coverage gaps because these endpoints are unreachable during scheduled scan windows. Which scanning approach would MOST effectively restore consistent vulnerability visibility for the distributed fleet?

Accepted Answer

Deploy agent-based scanning where lightweight agents installed on each endpoint collect and report vulnerability data to a central console regardless of location

Answer

Increase the frequency of network-based authenticated scans to daily during business hours

Answer

Require all remote employees to keep a persistent VPN tunnel active so the network scanner can reach their laptops

Answer

Switch to passive network monitoring at the corporate perimeter to infer endpoint vulnerabilities from observed traffic