Cisco Certified Support Technician (CCST) CybersecurityVulnerability ManagementHard
A security team is implementing a new vulnerability management program. They want to ensure that all assets within their network are regularly scanned for security weaknesses. However, they are concerned about the potential performance impact of scanning during peak business hours. Which factor is MOST critical to consider when scheduling vulnerability scans to balance thoroughness and operational continuity?
- AThe frequency of new vulnerability disclosures for similar systems.
- BThe operational impact window (maintenance windows) of the target systems.
- CThe CVSS Base Score of the highest-rated vulnerability.
- DThe number of vulnerabilities identified in previous scans.
Show answer & explanationAnswer & explanation
Correct answer: B. The operational impact window (maintenance windows) of the target systems.
The operational impact window, often referred to as a maintenance window or off-peak hours, is crucial for scheduling scans. It ensures that thorough scanning can occur without disrupting critical business operations, directly addressing the concern about 'potential performance impact' and 'operational continuity'.
Why the other options are wrong
- A. Frequency of new disclosures relates to the need for scanning, but not specifically to the optimal timing to avoid operational impact.
- C. CVSS scores help prioritize remediation, not the scheduling of the scan itself to minimize operational impact.
- D. Previous scan results inform prioritization but not directly the best time to scan to avoid performance impact.
Vulnerability Scan Scheduling
Vulnerability scan scheduling involves planning when to conduct scans to maximize their effectiveness in identifying vulnerabilities while minimizing impact on business operations.
- Often performed during off-peak hours or dedicated maintenance windows.
- Considerations include system criticality, network bandwidth, and potential for disruption.
- Regularity is key for continuous monitoring, but timing is crucial for operational continuity.
Memory trick: Scan Smart: Time, Scope, Impact, Credentials.