Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

Question

Options

• AReviewing system administrator logs
• BAuditing configuration templates
• CChecking vendor product releases
• DPerforming system scans

• A
  7% (2)
• B
  11% (3)
• C
  4% (1)
• D
  78% (21)

Explanation

Performing system scans (D) is the most effective method because automated vulnerability scanners actively probe live systems to detect misconfigurations, missing patches, open ports, and known CVEs in real time - directly identifying what's exploitable in your environment. This is a proactive, comprehensive, and repeatable technique that covers the actual attack surface.

Why the distractors fall short:

• A (System admin logs): Logs are reactive - they record what already happened, not what vulnerabilities currently exist. They also depend on proper logging being configured in the first place.
• B (Auditing configuration templates): Templates represent intended state, not actual state. Systems may deviate from templates after deployment, so auditing them misses real-world drift.
• C (Checking vendor product releases): Release notes and patch advisories tell you vulnerabilities exist in a product, but not whether your specific environment is actually affected or exposed.

Memory tip: Think of vulnerability discovery as needing active, live interrogation of your systems. Scans go out and ask "are you vulnerable right now?" - logs, templates, and vendor notes are all passive sources that can't answer that question directly. When the exam says "MOST effective for discovering," reach for the method that touches real systems.

No community discussion yet for this question.