A healthcare organization runs quarterly authenticated vulnerability scans of its internal servers. After a recent scan, the security team notices that several new web applications were deployed to a DMZ but were not included in the scan scope. What is the most appropriate action?

Ask the application team to self-report any vulnerabilities they know about.

Update the scan scope to include the DMZ web applications and perform an immediate authenticated scan of those assets.

Wait until the next quarterly scan to include the new applications, as they were just deployed.

Perform an unauthenticated external scan of the DMZ applications to avoid any disruption.

Certified in Risk and Information Systems Control

Domain 2Objective 3

Vulnerability Management CRISC Practice Questions (Page 7)

Part of the Domain 2: Risk Assessment domain, which accounts for 22% of the CRISC exam.

31questions here

7free pages

6concepts

22%of the exam

Questions 31–31

31application · medium
A healthcare organization runs quarterly authenticated vulnerability scans of its internal servers. After a recent scan, the security team notices that several new web applications were deployed to a DMZ but were not included in the scan scope. What is the most appropriate action?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CRISC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CRISC” is a trademark of its owner, used for identification only.

Vulnerability Management CRISC Practice Questions (Page 7)

Questions 31–31

A healthcare organization runs quarterly authenticated vulnerability scans of its internal servers. After a recent scan, the security team notices that several new web applications were deployed to a DMZ but were not included in the scan scope. What is the most appropriate action?

Keep studying — Domain 2: Risk Assessment