CompTIA CySA+ (CS0-003)Reporting and CommunicationMedium
A security analyst is reviewing a vulnerability report from a recent penetration test. The report identifies several critical findings on an externally facing web server. The analyst needs to present these findings to the IT operations team for remediation. Which of the following details should the analyst prioritize in the report to ensure the IT operations team can efficiently address the vulnerabilities?
- AA comparison of this year's findings to previous penetration test results.
- BSpecific remediation steps, affected assets, and evidence of the vulnerability.
- CA detailed explanation of the penetration testing methodology used.
- DThe potential business impact and reputational damage of each vulnerability.
Show answer & explanationAnswer & explanation
Correct answer: B. Specific remediation steps, affected assets, and evidence of the vulnerability.
For the IT operations team, practical and actionable details are crucial. Specific remediation steps, identification of affected assets, and concrete evidence of the vulnerability allow them to efficiently locate, understand, and fix the issues.
Why the other options are wrong
- A. Historical comparisons are useful for management and trend analysis, but not for immediate technical remediation.
- C. Methodology is for context, not for direct remediation action by operations.
- D. Business impact is for executive leadership; operations needs technical details to fix the problem.
Vulnerability Remediation Reporting (Technical)
Reports designed for technical teams (e.g., IT operations, development) that provide actionable details necessary to fix identified security vulnerabilities.
- Focuses on technical specifics: affected assets, CVEs, configuration details.
- Includes clear, prioritized remediation steps.
- Provides evidence of the vulnerability for verification.
Memory trick: IT Ops needs 'What, Where, and How to Fix it, with Proof'.