Vulnerability Management Reporting CS0-003 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security team is tracking the mean time to remediate (MTTR) for vulnerabilities. The MTTR has been steadily increasing, and the team suspects that the increase is due to a lack of standardized remediation procedures. Which metric would best help the team confirm this hypothesis?

   • ANumber of vulnerability scanners in use.
   • BAverage severity score of vulnerabilities.
   • CTotal number of vulnerabilities discovered each month.
   • DPercentage of vulnerabilities that required rework or follow-up after initial remediation.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team has identified a critical vulnerability in a third-party application that is used across the organization. The vendor has not yet released a patch, but the vulnerability is being actively exploited in the wild. Which action should the team take as part of its action plan?

   • AImplement additional monitoring and detection rules to identify exploitation attempts.
   • BRemove the application from the vulnerability scanner's scope.
   • CWait for the vendor to release a patch before taking any action.
   • DDisable the application until the vendor releases a patch.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security manager wants to define a KPI that measures the efficiency of the vulnerability remediation process. The goal is to identify bottlenecks in the workflow. Which KPI would be most appropriate?

   • ANumber of security analysts on the team.
   • BAverage time from vulnerability discovery to assignment to a remediation owner.
   • CTotal number of vulnerabilities remediated in the last month.
   • DPercentage of assets that have been scanned in the last 30 days.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst needs to communicate the results of a vulnerability assessment to the IT operations team, which will be responsible for patching. The operations team has limited time and needs to know which systems to fix first. What is the most effective way to communicate this information?

   • AEmail a summary of the total number of vulnerabilities by severity.
   • BHold a meeting to discuss the vulnerabilities without providing a written list.
   • CProvide a prioritized list of vulnerabilities by risk score, with affected assets and recommended remediation actions.
   • DSend the full vulnerability scan report and let the operations team decide what to prioritize.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A healthcare organization's security team needs to report to the executive leadership on the effectiveness of its vulnerability management program. The executives are most concerned about reducing organizational risk. Which KPI would best align with this concern?

   • APercentage of critical and high vulnerabilities remediated within the defined SLA
   • BNumber of vulnerability scans performed per month
   • CAverage time spent on each vulnerability ticket
   • DTotal number of vulnerabilities discovered in the last quarter
   Reveal Solution Discussion Select an answer first