Question 1 of 30
Research into a cybersecurity team\'s vulnerability management process reveals a backlog of hundreds of identified vulnerabilities across various systems. The team is tasked with prioritizing remediation efforts with limited resources. The Common Vulnerability Scoring System (CVSS) scores for these vulnerabilities range from low to critical.\n\nWhich of the following approaches best represents a professional and effective strategy for prioritizing these vulnerabilities for remediation?
Correlating CVSS scores with asset criticality, business impact, and relevant compliance requirements to inform a risk-based prioritization strategy.
Solely prioritizing vulnerabilities based on their raw CVSS base scores, addressing the highest scores first.
Prioritizing vulnerabilities that are easiest and quickest to remediate, regardless of their CVSS score or business impact.
Ignoring vulnerabilities with CVSS scores below a certain threshold, assuming they pose minimal risk.

Preparing for CompTIA CySA+ Exam? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free