CISSP Practice Question (Domain 6: Security Assessment and Testing)
A hospital's new scanner reports 4,000 findings. The CIO wants a board dashboard next month showing risk falling, and operations wants to patch by severity score alone. What should the security manager do FIRST?
A. Patch every critical and high finding immediately
B. Validate findings and map them to asset criticality and owners
C. Build the dashboard from scanner severity counts
D. Rescan monthly to chart open findings
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
2
7 comments
Vincent Primiani
7
CISSP Practice Question (Domain 6: Security Assessment and Testing)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by