Which of the following is the appropriate phase in the incident response process to perform a vulnerability scan to determine the effectiveness of corrective actions?

The correct answer is C. Recovery. Performing a vulnerability scan during the recovery phase ensures that corrective actions, such as patches or configuration changes, have effectively addressed the vulnerabilities exploited during the incident. This step validates the system's security before fully restoring…

Submitted by daniela_cl· Mar 6, 2026Incident Response and Management

Question

Options

ALessons learned
BReporting
CRecovery
DRoot cause analysis

How the community answered

(26 responses)

B
4% (1)
C
92% (24)
D
4% (1)

Explanation

Performing a vulnerability scan during the recovery phase ensures that corrective actions, such as patches or configuration changes, have effectively addressed the vulnerabilities exploited during the incident. This step validates the system's security before fully restoring operations.

Topics

#incident response phases#recovery phase#vulnerability scanning#corrective actions

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice