CS0-003: CompTIA Cybersecurity Analyst (CySA+)

By CompTIA · Question Mode

QuestionQ7

Vulnerability Management

A security analyst is enhancing an organization’s vulnerability-management program. The analyst validates the current reports with the infrastructure teams, but the reports fail to accurately show the current patching levels. Which of the following would most likely fix the reporting inaccuracies?

Explanation

Credentialed vulnerability scans authenticate to each system and directly inspect installed software, configurations, and patch status. This produces more accurate patch-level findings than unauthenticated scans, which must infer vulnerability status from externally visible information.

Community Discussion

No comments yet. Be the first to start the discussion!