Which of the following situations would MOST likely warrant revalidation of a previous security assessment?

The correct answer is D. When most of the vulnerabilities have been remediated. When most vulnerabilities have been remediated, a revalidation (i.e., a re-test or verification scan) is warranted to confirm that the fixes were effective and did not introduce new issues. Revalidation specifically measures whether a prior assessment's findings have been…

Vulnerability discovery and analysis

Question

Options

AAfter detection of a breach
BAfter a merger or an acquisition
CWhen an organization updates its network firewall configurations
DWhen most of the vulnerabilities have been remediated

How the community answered

(68 responses)

A
6% (4)
B
3% (2)
C
1% (1)
D
90% (61)

Explanation

When most vulnerabilities have been remediated, a revalidation (i.e., a re-test or verification scan) is warranted to confirm that the fixes were effective and did not introduce new issues. Revalidation specifically measures whether a prior assessment's findings have been resolved. A breach (A) triggers incident response and a new investigation, not a revalidation of the prior assessment. A merger/acquisition (B) requires a brand-new assessment of a changed environment, not a revalidation. Updating firewall rules (C) is a routine change that doesn't demand revalidation of the whole prior assessment - only the affected controls might be re-checked.

Topics

#Security assessment lifecycle#Vulnerability remediation#Retesting#Remediation verification

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice