問題文
A team runs weekly scans that produce a list of findings, but the number of open findings keeps growing. Which part of vulnerability management is missing, and what does that show about the two halves of the practice?
選択肢
- The asset inventory.
- The part that assigns, tracks, and verifies the corrections; discovery alone does not reduce anything.
- Nothing is missing; a growing list is expected, since each weekly scan adds the findings it discovers to the ones already open.
- The scanning frequency, because a weekly cycle is too slow to keep up with the rate at which new findings are published and increasing the frequency to daily therefore causes the open count to fall as each finding is detected closer to the moment it appears.