Cisco Certified Support Technician (CCST) CybersecurityVulnerability ManagementMedium
A multinational corporation operates a complex IT environment with thousands of servers and network devices across various geographical locations. The security team needs to implement a comprehensive vulnerability management program. Which of the following approaches is most effective for continuously identifying new vulnerabilities and tracking their remediation status across such a large and distributed infrastructure?
- ADeploying a centralized vulnerability scanning platform with automated scheduling and reporting.
- BImplementing a bug bounty program for critical external-facing applications.
- CRelying solely on vendor security advisories and patching systems manually.
- DAnnual manual security audits conducted by external consultants.
Show answer & explanationAnswer & explanation
Correct answer: A. Deploying a centralized vulnerability scanning platform with automated scheduling and reporting.
For a large, distributed environment, a centralized, automated vulnerability scanning platform is essential. It provides continuous visibility, consistent scanning policies, and consolidated reporting, which are critical for effective vulnerability management at scale.
Why the other options are wrong
- B. A bug bounty program is valuable for specific applications but does not provide comprehensive vulnerability management for the entire IT infrastructure, especially internal systems.
- C. Relying solely on vendor advisories and manual patching is reactive and inefficient for thousands of devices; it lacks proactive scanning and comprehensive tracking.
- D. Annual manual audits are too infrequent and not scalable for continuous, comprehensive vulnerability management in a large, distributed environment.
Centralized Vulnerability Management
An approach using a single platform to manage vulnerability identification, assessment, and remediation across an entire organization's diverse IT assets.
- Provides continuous visibility and consistent policies.
- Essential for large, distributed environments.
- Automates scanning, reporting, and tracking.
Memory trick: Central Scan, Always On.