Exam SY0-701 topic 1 question 580 discussion

A. Automated scanning Explanation: Automated vulnerability scanning is the first step in identifying vulnerabilities across an environment. It systematically scans systems, networks, and applications for known security weaknesses, such as outdated software, misconfigurations, and missing patches. It provides a broad and efficient assessment before deeper security evaluations like penetration testing or threat hunting. Why Not the Other Options? B. Penetration testing → Penetration testing is a hands-on, targeted attack simulation, usually conducted after identifying vulnerabilities to confirm their exploitability. C. Threat hunting → This involves proactively searching for threats that have already bypassed defenses, not for general vulnerability discovery. D. Log aggregation → Collecting and analyzing logs helps with incident response and monitoring, but it does not directly identify vulnerabilities. E. Adversarial emulation → This simulates real-world attack techniques but is more advanced and comes after vulnerability identification.