ISC2 CISSP (Certified Information Systems Security Professional)Security OperationsHard
A security team is implementing a new approach to vulnerability management. Instead of relying solely on periodic scans, they are integrating continuous monitoring tools that automatically identify new vulnerabilities as they emerge and correlate them with asset inventories. This allows for near real-time prioritization and remediation. Which aspect of vulnerability management is being MOST significantly enhanced?
- AVulnerability Remediation
- BVulnerability Prioritization
- CVulnerability Assessment
- DVulnerability Identification
Show answer & explanationAnswer & explanation
Correct answer: B. Vulnerability Prioritization
While continuous monitoring helps identify vulnerabilities (A), the key enhancement described is the ability to 'correlate them with asset inventories' and allow for 'near real-time prioritization'. This moves beyond just finding vulnerabilities to understanding their impact and urgency, which is the essence of prioritization.
Why the other options are wrong
- A. Vulnerability Remediation is the act of fixing vulnerabilities, which is the ultimate goal, but the described enhancement specifically improves the *pre-remediation* step of deciding *what* to fix first.
- C. Vulnerability Assessment is a broader term encompassing identification and analysis, but the specific benefit here is the dynamic ranking.
- D. Vulnerability Identification is part of it, but the question highlights more than just finding them; it's about what happens *after* identification.
Vulnerability Prioritization
Vulnerability prioritization is the process of ranking identified vulnerabilities based on their potential impact, exploitability, and the criticality of the affected assets, to determine the order and urgency of remediation efforts.
- Crucial for efficient resource allocation.
- Considers severity, exploitability, and asset criticality.
- Enables a risk-based approach to remediation.
Memory trick: ID, Assess, Prioritize, Remediate, Verify, Monitor.