Practice Question · CISSP Study Group

Practice Question

During an internal audit, your team discovers several critical systems were excluded from the last vulnerability scan. The scanning tool was configured manually, and the administrator forgot to include new subnets. Management wants assurance that this oversight won’t happen again. What is the BEST step to take?

A. Assign vulnerability scanning responsibilities to a more experienced team member.

B. Increase scan frequency to weekly instead of monthly.

C. Integrate subnet discovery automation into the scanning workflow.

D. Outsource vulnerability management to a third party.

12 comments