I have a virtual network setup and I made a view virtual servers but this is the task I have below. I am new to Linux and trying to put together what tools I need to get this done. I am learning how to scan for vulnerabilities but no where near level of good and not sure how you do it.

You are tasked with determining the vulnerabilities of the new Production server and provide specific examples of how any vulnerabilities could be exploited. You are also asked to perform the same service on the Webserver in their DMZ.