CompTIA
CAS-005 · Question #254
During a vulnerability assessment, a scan reveals the following finding: Windows Server 2016 Missing hotfix KB87728 - CVSS 3.1 Score: 8.1 [High] - Affected host 172.16.15.2 Later in the review…
The correct answer is B. Performing an authenticated scan on the servers. Authenticated scans allow the scanner to verify installed patches and configurations, reducing false positives.
Submitted by lucia.co· Mar 6, 2026Security Operations
Question
During a vulnerability assessment, a scan reveals the following finding:
Windows Server 2016 Missing hotfix KB87728 - CVSS 3.1 Score: 8.1 [High]
- Affected host 172.16.15.2
Later in the review process, the remediation team marks the finding as a false positive. Which of the following is the best way to avoid this issue on future scans?
Options
- AGetting an up-to-date list of assets from the CMDB
- BPerforming an authenticated scan on the servers
- CConfiguring the sensor with an advanced policy for fingerprinting servers
- DCoordinating the scan execution with the remediation team early in the process
How the community answered
(20 responses)- B80% (16)
- C15% (3)
- D5% (1)
Explanation
Authenticated scans allow the scanner to verify installed patches and configurations, reducing false positives.
Community Discussion
No community discussion yet for this question.