Question

A CySA+ analyst completed an emergency patch cycle for a critical Apache Struts vulnerability across 40 web servers. The change management ticket is marked complete, and the system owners confirmed the patches were deployed. The analyst must now provide evidence to the security governance committee that the vulnerability has actually been remediated. Which action provides the most reliable verification?

Accepted Answer

Run a targeted credentialed rescan of the 40 servers and compare results against the original findings

Answer

Review the patch management console to confirm all 40 servers report the patch as installed

Answer

Ask each system owner to sign an attestation stating the patch was applied successfully

Answer

Close the vulnerability in the tracking system based on the completed change ticket