Question

A CySA+ analyst receives vulnerability scan output from three separate tools (a network scanner, a DAST tool, and an agent-based scanner) covering the same web server. The consolidated report lists 47 findings, but the analyst notices that CVE-2023-44487 appears three times with slightly different plugin names and two different CVSS scores. Before assigning remediation tickets to the server team, what should the analyst do FIRST?

Accepted Answer

Deduplicate and normalize the findings so the single underlying vulnerability is represented once with a reconciled severity

Answer

Open three separate remediation tickets so each scanner's finding can be tracked and closed independently

Answer

Discard the two lower-severity instances and keep only the finding with the highest CVSS score

Answer

Re-run all three scanners in intrusive mode to determine which tool produced the most accurate result