I practiced a question similar to this, and I think documenting vulnerabilities is important, but I don't remember it being the main approach recommended by the CIS Controls.
I feel like option D makes sense since conducting tests during maintenance windows minimizes disruption, but I can't recall if that's explicitly recommended.
I remember something about focusing on specific attack vectors, but I'm not sure if that means we should only use one at a time like option B suggests.
Okay, I've got this. The qualitative approach is the clear choice - it has a more straightforward process and is supported by appropriate guidance. I'm confident in this answer.
Okay, I think I've got a strategy for this. Enabling parallel jobs could help, but I also wonder if there are ways to cache the packages or optimize the installation process. I'll need to research that further.
upvoted 0 times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Brett
4 months agoTaryn
4 months agoLoren
4 months agoFlorinda
4 months agoHan
5 months agoBernardine
5 months agoGoldie
5 months agoAhmad
5 months agoAugustine
5 months agoStephane
5 months agoMerlyn
5 months ago