A security analyst is improving an organization's vulnerability management program. The analyst cross-checks the current reports with the system's infrastructure teams, but the reports do not accurately reflect the current patching levels. Which of the following will most likely correct the report errors?
Credentialed vulnerability scans allow the scanner to log into systems and retrieve accurate information about installed patches and configurations. If the reports do not reflect current patching levels, it is likely that the scan is being performed without credentials, leading to incomplete or inaccurate results.
Option A (Updating the scanning engine) ensures the tool has the latest detection capabilities but does not directly affect scan accuracy for missing patches.
Option B (Centralized patching) helps maintain consistency but does not correct reporting errors.
Option D (Resetting plug-ins) may be useful if plug-ins are outdated, but the primary issue is lack of privileged access during scanning.
Thus, C is the correct answer, as credentialed scans provide more accurate vulnerability assessments.
Brynn
2 months agoIsaac
8 days agoCarlota
10 days agoLizette
19 days agoEladia
1 months agoKathrine
2 months agoGeoffrey
25 days agoLouann
1 months agoEdelmira
1 months agoPete
2 months agoMargo
2 months agoJodi
2 months agoHelaine
2 months agoDanilo
3 months agoPhyliss
1 months agoCristy
1 months agoFelice
1 months agoRemedios
2 months agoKattie
2 months agoElli
2 months agoAntonio
3 months agoAleisha
3 months agoBrynn
4 months ago