CompTIA Security+ (SY0-701)Security OperationsMedium
A security team is regularly reviewing vulnerability scan reports. They frequently encounter findings related to outdated operating system versions and unpatched software on production servers. Which aspect of security operations is primarily failing in this scenario?
- AIncident Response
- BVulnerability Management
- CSecurity Awareness
- DBusiness Continuity
Show answer & explanationAnswer & explanation
Correct answer: B. Vulnerability Management
Vulnerability management includes identifying, assessing, and remediating vulnerabilities. Consistently finding outdated OS versions and unpatched software indicates a breakdown in the patching and configuration management aspects of a vulnerability management program.
Why the other options are wrong
- A. Incident response deals with active security incidents, not proactive vulnerability remediation.
- C. Security awareness educates users; it doesn't directly address server patching issues.
- D. Business continuity focuses on maintaining essential functions during disruptions, which is a different domain.
Vulnerability Management
The cyclical process of identifying, assessing, prioritizing, remediating, and mitigating software and system vulnerabilities.
- Includes patching and configuration management
- Aims to reduce attack surface
- Ongoing process, not a one-time event
Memory trick: Operations build and guard the security structure.