Question

A CySA+ analyst is preparing to launch the organization's quarterly vulnerability scan. The current asset inventory lists 480 hosts, but the analyst notices that a recent network topology change added a new subnet for a business unit that provisioned its own cloud-connected devices without notifying IT. The security manager wants to ensure the scan does not miss any live systems on the network. Which action should the analyst take FIRST to address this gap?

Accepted Answer

Run an active asset discovery scan (ping sweep and port enumeration) across all in-scope network ranges to identify live hosts before vulnerability scanning

Answer

Increase the CVSS threshold on the vulnerability scanner so that only critical findings are reported for the known 480 hosts

Answer

Schedule the vulnerability scan against the existing 480-host inventory and open a ticket to update the inventory next quarter

Answer

Enable credentialed scanning on the 480 known hosts to obtain deeper configuration data