A zero-day vulnerability is announced for the popular Apache web server in the middle of a workday. In Kimon's role as an information security analyst, he needs to quickly scan his network to determine what servers are vulnerable to the issue. What is Kimon's best route to quickly identify vulnerable systems?

In many cases when an exploit is initially reported, there are no prebuilt signatures or detections for vulnerability scanners, and the CVE database may not immediately have information about the attack. Kimon's best option is to quickly gather information and review potentially vulnerable servers based on their current configuration. As more information becomes available, signatures and CVE information are likely to be published. Unfortunately for Kimon, IDS and IPS signatures will detect only attacks and won't detect whether systems are vulnerable unless he sees the systems being exploited.