Vulnerabilities in software can be addressed by:

Question

Options

• AWaiting for public exploit announcements
• BRegular vulnerability scanning and patching
• CIgnoring minor software updates
• DFocusing only on antivirus protection

• B
  90% (19)
• C
  5% (1)
• D
  5% (1)

Explanation

Regular vulnerability scanning and patching (B) is the only proactive, systematic approach - it identifies weaknesses before attackers exploit them and closes those gaps through updates, which is the foundation of any sound security posture.

Why the distractors fail:

• A - Waiting for public exploit announcements means attackers already have a head start; reactive security is the worst position to be in.
• C - "Minor" updates frequently contain critical security patches; dismissing them by size is a dangerous heuristic.
• D - Antivirus only addresses a narrow category of threats (known malware); it does nothing for unpatched vulnerabilities in applications, OSes, or libraries.

Memory tip: Think "Scan → Patch → Repeat." The word vulnerability implies something that can be found and fixed - only option B describes finding (scanning) and fixing (patching).

No community discussion yet for this question.