CREST Security & Vulnerability Management

Question 1

What is a vulnerability management process?

Accepted Answer

Identifying and fixing security flaws

Answer

Ignoring security patches.

Answer

Avoiding system updates.

Answer

Hiring more IT staff.

Question 2

What is a key element of effective vulnerability management?

Accepted Answer

Continuous monitoring and patching

Answer

Setting up firewalls.

Answer

Encrypting data.

Answer

Storing backups.

Question 3

Why is patch management crucial for vulnerability management?

Accepted Answer

It fixes known vulnerabilities

Answer

It only helps in software performance.

Answer

It makes the system slower.

Answer

It is not necessary.

Question 4

How can organizations prioritize vulnerabilities?

Accepted Answer

By assessing impact and exploitability

Answer

By randomly selecting vulnerabilities.

Answer

By ignoring the severity of issues.

Answer

By selecting the oldest vulnerabilities first.

Question 5

What is the purpose of conducting a vulnerability scan?

Accepted Answer

To identify weaknesses in systems

Answer

To identify network traffic patterns.

Answer

To create backup copies.

Answer

To enhance system performance.

Question 6

What is the role of threat intelligence in vulnerability management?

Accepted Answer

It helps identify and mitigate new threats

Answer

It is irrelevant to security management.

Answer

It helps with software licensing.

Answer

It is used only for compliance.

Question 7

Why should organizations conduct regular vulnerability assessments?

Accepted Answer

To stay ahead of emerging security threats

Answer

To increase system downtime.

Answer

To minimize system performance.

Answer

To reduce security budget.

Question 8

What is the significance of risk assessments in vulnerability management?

Accepted Answer

Risk assessments help prioritize vulnerabilities

Answer

Risk assessments are not necessary.

Answer

Risk assessments slow down operations.

Answer

Risk assessments only track employee behavior.

Question 9

Why is it important to involve all stakeholders in vulnerability management?

Accepted Answer

Stakeholder involvement ensures effective security measures

Answer

It is unnecessary to involve non-technical stakeholders.

Answer

It slows down decision-making.

Answer

It is only for compliance purposes.