SY0-701 Question 133

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Risk is fundamentally calculated based on likelihood and impact (Risk = Likelihood X times Impact). Context matters: A critical vulnerability on a public-facing web server containing your customer database (High Classification) poses a massive organizational risk. The exact same vulnerability on an isolated test machine containing no sensitive data (Low Classification) poses a minimal risk. Prioritization: It allows the security team to cut through the noise and patch the systems that matter most first. A. A full inventory of all hardware and software: While an asset inventory is incredibly important for determining if you are vulnerable (exposure), it doesn't tell you the impact of that vulnerability on the business. An inventory tells you what you have; classification tells you how much it matters.

• Chose A5

  In this scenario, the best answer is "A". A full inventory of all hardware and software is the correct answer because it provides the essential information needed to accurately assess the risk posed by a new vulnerability. This inventory enables the security analyst to identify affected systems, prioritize responses, and measure the overall risk to the organization effectively.

• Chose A13

  Conducting inventory is part of risk management, so knowing what is in your environment will be very helpful to track and patch