Vulnerability Life Cycle/ 5. Security Assessment and Testing

Question 1

How can an organization respond to a vulnerability?

Accepted Answer

Implementing other compensating controls, Using network segmentation to isolate the affected system, Purchasing insurance to transfer the financial risk, Applying a patch or other corrective measure

Question 2

How can organizations respond to vulnerabilities?

Accepted Answer

Apply a patch, Implement compensating controls, Use network segmentation

Question 3

How can an organization respond to a vulnerability?

Accepted Answer

Implementing other compensating controls, Purchasing insurance to transfer the financial risk, Using network segmentation to isolate the affected system, Applying a patch or other corrective measure

Question 4

How does an organization become aware of a vulnerability?

Accepted Answer

Through vulnerability scans, Through system and process audits, Through penetration tests, Through responsible disclosure or bug bounty programs

Question 5

What is the purpose of validation of remediation?

Accepted Answer

Verify vulnerability absence

Question 6

Who can perform the validation of remediation?

Accepted Answer

External auditors

Question 7

What is the purpose of vulnerability analysis?

Accepted Answer

Supplementing the external analysis of the vulnerability, Prioritizing and categorizing the vulnerability, Confirming that the vulnerability exists

Question 8

What is the final stage in the vulnerability life cycle?

Accepted Answer

Reporting

Question 9

What is the purpose of vulnerability remediation?

Accepted Answer

Correct the vulnerability

Question 10

What is the first stage in the vulnerability identification process?

Accepted Answer

Vulnerability scans

Question 11

What is the purpose of vulnerability analysis?

Accepted Answer

Confirming vulnerability existence

Question 12

What is the next step after identifying a possible vulnerability?

Accepted Answer

Prioritizing and categorizing the vulnerability, Confirming that the vulnerability exists, Supplementing the external analysis of the vulnerability

Question 13

What are some sources of vulnerability identification?

Accepted Answer

Vulnerability scans, Penetration tests, Reports from responsible disclosure or bug bounty programs, Results of system and process audits

Question 14

Where can vulnerability identification come from?

Accepted Answer

Reports from bug bounty programs

Vulnerability Life Cycle/ 5. Security Assessment and Testing

Questions 14

Vulnerability Life Cycle/ 5. Security Assessment and Testing

Questions 14