Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

The correct answer is A. A full inventory of all hardware and software. A full inventory of all hardware and software is essential for measuring the overall risk to an organization when a new vulnerability is disclosed, because it allows the security analyst to identify which systems are affected by the vulnerability and prioritize the remediation…

Submitted by valeria.br· Mar 6, 2026Security program management and oversight

Question

Options

AA full inventory of all hardware and software
BDocumentation of system classifications
CA list of system owners and their departments
DThird-party risk assessment documentation

How the community answered

(24 responses)

A
79% (19)
B
13% (3)
C
4% (1)
D
4% (1)

Explanation

A full inventory of all hardware and software is essential for measuring the overall risk to an organization when a new vulnerability is disclosed, because it allows the security analyst to identify which systems are affected by the vulnerability and prioritize the remediation efforts. Without a full inventory, the security analyst may miss some vulnerable systems or waste time and resources on irrelevant ones. Documentation of system classifications, a list of system owners and their departments, and third-party risk assessment documentation are all useful for risk management, but they are not sufficient to measure the impact of a new vulnerability.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice