Cisco Certified Support Technician (CCST) CybersecurityVulnerability ManagementMedium
A security team is implementing a new vulnerability management program. As part of their strategy, they want to establish a continuous process for identifying and addressing security weaknesses in their systems and applications. Which of the following activities is MOST crucial for consistently updating the organization's understanding of its evolving threat landscape and system vulnerabilities?
- AImplementing an automated, regular vulnerability scanning schedule.
- BConducting annual penetration tests on critical systems.
- CReviewing security logs daily for anomalous activities.
- DPerforming quarterly internal security audits.
Show answer & explanationAnswer & explanation
Correct answer: A. Implementing an automated, regular vulnerability scanning schedule.
Automated, regular vulnerability scanning is the most effective way to consistently and continuously identify new and existing vulnerabilities across a broad range of systems as the environment changes and new threats emerge. It provides ongoing visibility into the evolving threat landscape.
Why the other options are wrong
- B. Annual penetration tests are valuable but are point-in-time assessments and not continuous for evolving threats.
- C. Reviewing security logs focuses on detecting active attacks or anomalies, not proactively identifying underlying vulnerabilities.
- D. Quarterly audits provide periodic checks but do not offer the continuous, real-time insight needed for an 'evolving threat landscape'.
Continuous Vulnerability Scanning
Continuous vulnerability scanning is an ongoing, automated process of identifying security weaknesses and misconfigurations across an organization's IT infrastructure and applications.
- Provides real-time or near real-time visibility into the security posture.
- Helps detect new vulnerabilities as they emerge or as the environment changes.
- Often integrates with patch management and security information and event management (SIEM) systems.
Memory trick: SCAN constantly to CATCH risks.