To confirm the application version reported by a vulnerability scan, which scripting approach is recommended?

• A. Use a Python script to verify the version
• B. Use a PowerShell script to verify the version
• C. Use a Bash script to parse the results
• D. Manually check the UI

Answer: (B)

Verifying the version reported by a vulnerability scan should be done with an automated, repeatable method that can pull the actual installed version from the target system. PowerShell is the best fit in Windows-dominated environments because it’s built into the OS, supports remote management, and has straightforward ways to read version data from common sources such as registry uninstall keys, file VersionInfo, and WMI/CIM queries. You can script a check that fetches the true installed version on each host and compare it to the scanner’s report, giving you consistent, scalable validation across many systems without manual UI work. While Bash excels on Unix-like systems and Python can do the job, both require additional setup or cross-platform considerations in typical enterprise vulnerability workflows, making PowerShell the most practical choice for this task.