CISSP · Question #579
Which of the following processes has the PRIMARY purpose of identifying outdated software versions, missing patches, and lapsed system updates?
The correct answer is B. Vulnerability management. Vulnerability management is the process that has the primary purpose of identifying outdated software versions, missing patches, and lapsed system updates. Vulnerability management is a systematic and proactive approach to identifying, assessing, and mitigating the vulnerabilitie
Question
Options
- APenetration testing
- BVulnerability management
- CSoftware Development Life Cycle (SDLC)
- DLife cycle management
How the community answered
(25 responses)- A4% (1)
- B92% (23)
- D4% (1)
Explanation
Vulnerability management is the process that has the primary purpose of identifying outdated software versions, missing patches, and lapsed system updates. Vulnerability management is a systematic and proactive approach to identifying, assessing, and mitigating the vulnerabilities that may affect the organization's information systems and assets. A vulnerability is a weakness or a flaw in a system or an application that can be exploited by an attacker to compromise the security or the functionality of the system or the application. Vulnerability management can help prevent or reduce the impact of the attacks that may exploit the vulnerabilities, and improve the security and the quality of the information systems and assets. Vulnerability management has the primary purpose of identifying outdated software versions, missing patches, and lapsed system updates, as these are some of the common sources and causes of vulnerabilities. Outdated software versions, missing patches, and lapsed system updates can expose the system or the application to known or unknown vulnerabilities, such as bugs, errors, or security flaws, that can be exploited by the attackers. Vulnerability management can help identify these issues and resolve them by applying the latest software versions, patches, and updates, and by ensuring that the system or the application is up to date and secure.
Topics
Community Discussion
No community discussion yet for this question.