A security analyst needs to create a vulnerability report for both technical staff and senior management. The report must be useful to both audiences. What is the best approach?

Create an executive summary with high-level findings and a separate technical appendix with detailed information

Send a verbal summary to management and a written report to technical staff

Write a single detailed technical report and send it to everyone

Only include the most critical vulnerabilities in the report

A security analyst is writing a vulnerability report for a compliance audit. The report must demonstrate that the organization has a process for identifying, analyzing, and remediating vulnerabilities. What is the most important element to include in the report?

The names and contact information of the security team members

The technical details of each vulnerability and how it was exploited

A summary of the vulnerability management process, including the tools used and the steps taken for each vulnerability

A list of all vulnerabilities that were found in the last year

What is the primary goal of vulnerability validation?

To confirm that remediation was successful

To identify new vulnerabilities

A security analyst is reviewing the results of a vulnerability scan. The scan found a critical vulnerability in a web server, but the analyst knows that the web server is scheduled to be decommissioned in two weeks. What is the most appropriate action?

Ignore the vulnerability because the system will be decommissioned

Immediately patch the web server to remediate the vulnerability

Document the vulnerability and the decommissioning plan in the report, and prioritize other vulnerabilities for remediation

Decommission the web server immediately to eliminate the vulnerability

CompTIASecurity+

Domain 4Objective 3

Vulnerability Management SY0-701 Practice Questions (Page 5)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

28%of the exam

Questions 21–24

21application · medium
A security analyst needs to create a vulnerability report for both technical staff and senior management. The report must be useful to both audiences. What is the best approach?
Select an answer first
22expert · hard
A security analyst is writing a vulnerability report for a compliance audit. The report must demonstrate that the organization has a process for identifying, analyzing, and remediating vulnerabilities. What is the most important element to include in the report?
Select an answer first
23foundation · easy
What is the primary goal of vulnerability validation?
Select an answer first
24expert · hard
A security analyst is reviewing the results of a vulnerability scan. The scan found a critical vulnerability in a web server, but the analyst knows that the web server is scheduled to be decommissioned in two weeks. What is the most appropriate action?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.