You are the Security Consultant and you frequently do vulnerability assessments on client computers. You want to have a standardized approach that would be applicable to all of your clients when…

The correct answer is A. Utilize OVAL. Open Vulnerability Assessment Language (OVAL) is a common language for security professionals to use when checking for the presence of vulnerabilities on computer systems. OVAL provides a baseline method for performing vulnerability assessments on local computer Answer: D is…

Audit Fundamentals & Planning

Question

You are the Security Consultant and you frequently do vulnerability assessments on client computers. You want to have a standardized approach that would be applicable to all of your clients when doing a vulnerability assessment. What is the best way to do this?

Options

AUtilize OVAL.
BCreate your own standard and use it with all clients.
CUtilize each client's security policies when doing a vulnerability assessment for that client.
DUtilize the Microsoft security recommendations.

How the community answered

(27 responses)

A
78% (21)
B
4% (1)
C
7% (2)
D
11% (3)

Explanation

Open Vulnerability Assessment Language (OVAL) is a common language for security professionals to use when checking for the presence of vulnerabilities on computer systems. OVAL provides a baseline method for performing vulnerability assessments on local computer Answer: D is incorrect. While Microsoft security standards will be appropriate for many of your clients, they won't help clients using Linux, Macintosh, or Unix. They also won't give you insight into checking your firewalls or routers. Answer: C is incorrect. This would not fulfill the requirement of having a standardized approach applicable to all clients. B is incorrect. This would not be the best way. You should use common industry standards, like OVAL.

Topics

#OVAL#vulnerability assessment#security standards#audit methodology

Community Discussion

No community discussion yet for this question.

Full GSNA Practice