stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Day 10 CySA + Flashcards | StudBud
Explore
/
Day 10 CySA +
Day 10 CySA +
6 terms
·
StudBud Administration
·
32 plays
Imported from external platform
Flashcards
6 cards
F
Practice quiz
P
Host live
L
Questions
6
Answers
1
What 2 documents should Bob consult to find customer commitments with respect to vulnerability scans performance impact?
SLAs and DRPs
SLAs and MOUs
BIAs and MOUs
DRPs and BIAs
2
Which of the following would be the least useful metric to evaluate the success of a vulnerability management program?
Number of open critical vulnerabilities over time
Number of systems containing critical vulnerabilities
Time to resolve critical vulnerabilities
Total number of vulnerabilities reported
3
Which one of the following people would normally be in the best position to remediate a server vulnerability?
IT manager
Network engineer
Cybersecurity analyst
System administrator
4
In what step of the incident response process do outputs drive new preparation activities?
Lessons learned
Preparation
Mitigation
Assessment
5
TJ is preparing to conduct a vulnerability scan for a new client. Which step should TJ perform 1st?
Conduct penetration testing
Obtain permission for the scans
Run a discovery scan
Run a vulnerability evaluation scan
6
Which report here would be the most useful to the system engineer who wants to remediate vulnerabilities in a server?
PCI Technical Report
Executive Report
Technical Report
Qualys Top 20 Report
