Can you explain how automated vulnerability assessment tools work for someone who has never done cybersecurity scans on a cloud server before