Question

A quarterly vulnerability scan of an information security manager's environment returns thousands of findings across hundreds of assets. The security team lacks the capacity to remediate all findings quickly. Which factor should MOST influence how the manager prioritizes remediation?

Accepted Answer

The exploitability of the vulnerability combined with the criticality of the affected asset to the business

Answer

The total number of vulnerabilities identified on each individual server

Answer

The chronological order in which the vulnerabilities were first detected by the scanner

Answer

The CVSS base score reported by the scanning tool for each finding