200-201 Question 157

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  the correct answer is B. In a SOC (Security Operations Center) environment, full assets scan (or scan coverage) is a fundamental vulnerability management metric. It measures the percentage of an organization's inventory that has been successfully scanned, helping to identify "blind spots" where vulnerabilities might exist undetected

• Chose B2

  The correct answer is B Full Assets Scan Explanation A vulnerability management metric is a measurable indicator used to evaluate and track the effectiveness of a vulnerability management program. It provides insights into how well an organization identifies, assesses, and mitigates vulnerabilities across its systems. Why B. Full Assets Scan is Correct: Conducting a full assets scan is a critical component of vulnerability management. It helps ensure that all assets in the organization are checked for known vulnerabilities, misconfigurations, and compliance issues. Metrics derived from these scans, such as the number of detected vulnerabilities or the time to remediate them, are key for assessing the state of the organization's security posture.

• Chose C3

  https://purplesec.us/learn/vulnerability-management-metrics/ 6. Internal Vs External Exposure Your external internet facing applications inherently are at highest exposure to outside threats compared to internal. An organization should have separate scanners for each environment. Although an external scan has high priority, internal scans should be prioritized as well due to the potential of a threat actor entering your network and exploiting a threat is always probable.