Free CompTIA CySA+ CS0-003 Practice Question

The best approach to discover devices at the edge of a network for mitigating potential vulnerabilities is to use a network scanning tool with active scanning capabilities such as Nmap. Active scanning can accurately detect a wide range of devices, including those with minimal signatures, by sending packets to the network and observing responses. This method is comprehensive and provides visibility into devices that might be missed by passive scanning or limited-purpose network discovery methods which might result in incomplete asset discovery.