Which of the following are the MOST important factors for proactively determining system vulnerabilities?

Question

Options

• ASubscribe to vendor mailing list to get notification of system vulnerabilities
• BDeploy Intrusion Detection System (IDS) and install anti-virus on systems
• CConfigure firewall, perimeter router and Intrusion Prevention System (IPS)
• DConduct security testing, vulnerability scanning, and penetration testing

• A
  4% (2)
• B
  7% (3)
• C
  13% (6)
• D
  76% (34)

Explanation

Option D is correct because security testing, vulnerability scanning, and penetration testing are active, proactive methods that directly discover weaknesses in your systems before attackers do - this directly answers "proactively determining vulnerabilities."

Why the distractors fall short:

• A (vendor mailing lists) is reactive, not proactive - you learn about vulnerabilities only after the vendor discovers and discloses them, meaning your window of exposure has already begun.
• B (IDS + antivirus) are detection and response controls - they identify attacks in progress or malware already present, but do not reveal underlying system weaknesses beforehand.
• C (firewall, router, IPS) are preventive and defensive perimeter controls - they block or stop threats but do not scan your own systems to find what vulnerabilities exist internally.

Memory tip: The keyword is "proactively determining" - think "finding holes before attackers do." Only D involves actively testing your own systems with that intent. Associate the other options with their roles: A = notify, B = detect, C = block - none of which mean discover your own vulnerabilities.

No community discussion yet for this question.