Exam SY0-701 topic 1 question 512 discussion

Actual exam question from CompTIA's SY0-701

Question #: 512
Topic #: 1

A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this risk. Which of the following should the systems administrator perform?

A. Packet capture
B. Vulnerability scan
C. Metadata analysis
D. Automated reporting

Show Suggested Answer

Suggested Answer: B 🗳️

by test_arrow at Feb. 19, 2025, 1:56 a.m.

Comments

Submit Cancel

test_arrow

2 months, 2 weeks ago

Selected Answer: B

B. Vulnerability Scan Why? A vulnerability scan systematically checks systems against a database of known vulnerabilities (including CVEs). It helps identify which systems, applications, or services are affected by the disclosed CVE. Most vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) provide detailed reports and potential remediation steps. Why Not the Others? A. Packet Capture – Used for network traffic analysis, but it won’t directly identify vulnerable systems. C. Metadata Analysis – Involves examining file or system metadata, which is not relevant for detecting software vulnerabilities. D. Automated Reporting – Helps document findings but does not actively identify vulnerable systems.

upvoted 2 times

...