100-160 Question 178
Select 3You are a cybersecurity technician tasked with implementing a vulnerability management program for your organization. Which of the following steps is essential to ensure the program is effective in identifying and mitigating vulnerabilities over time?
- A
Regularly scanning systems and networks for vulnerabilities using automated tools.
- B
Manually reviewing every file and configuration on each system for potential vulnerabilities.
- C
Prioritizing vulnerabilities based on their severity and potential impact to the business.
- D
Immediately remediating all vulnerabilities, regardless of their impact or criticality.
- E
Establishing a process for regularly updating and patching software and systems.
Show answer and explanation
Correct answers: A, C, E
Explanation
Effective vulnerability management involves regularly scanning for vulnerabilities, prioritizing them based on risk, and establishing a process to address them, such as patch management. This ensures that the organization focuses on the most critical vulnerabilities while maintaining an ongoing process to mitigate risks over time.
- A. Correct.
Regularly scanning systems and networks is a key part of vulnerability management, as it helps identify potential vulnerabilities before they are exploited.
- B. Incorrect.
Manually reviewing every file and configuration is not a scalable or efficient approach for vulnerability management, especially in larger organizations.
- C. Correct.
Prioritizing vulnerabilities based on severity and potential impact ensures that resources are focused on addressing the most critical risks first.
- D. Incorrect.
While remediating vulnerabilities is important, prioritization is crucial. Not all vulnerabilities require immediate action, and focusing on critical ones ensures better use of resources.
- E. Correct.
Regular updates and patching are a fundamental part of addressing known vulnerabilities and preventing exploitation.