Module 5: Vulnerability Remediation & Other Actions

Question 1

Exception Management can be setup for how many types of Vulnerability Response?

Answer 1

All 4 types

Question 2

Which field allows you to select between Vulnerability Response or GRC?

Answer 2

Manage exceptions using

Question 3

What system property is set to true by default to enable Flow Designer for VR?

Answer 3

sn_vul.flow_designer_activation

Question 4

T/F: Exception rules are only valid with GRC Vulnerability Response

Answer 4

False - Exception Rules are only valid with non-GRC Vulnerability Response

Question 5

What enable you to automate the deferral process for vulnerable items (VIs)?

Answer 5

Exception rules

Question 6

Where are exceptions for IVR, AVR, and CVR stored?

Answer 6

[sn_vul_auto_exception_rule] table

Question 7

You can request an exception for the vulnerable items (VIs) that can’t be remediated or deferred immediately, by identifying the ________________, ________________, or ________________.

Answer 7

Impacted vulnerabilities
Configuration items (CIs)
Vulnerable items (VIs)

Question 8

Exceptions for Configuration Compliance are stored in which table?

Answer 8

[sn_vulc_auto_exception_rule]

Question 9

What is defined as a condition wherein the scanner reports that a vulnerability exists in the system, but in reality, there is no vulnerability?

Answer 9

False positive

Question 10

What are false positives available on?

Answer 10

Vulnerable items
Remediation tasks

Question 11

False positives are available for which vulnerability types?

Answer 11

Infrastructure
Application
Container

Question 12

What role is required to set something as a false positive?

Answer 12

Remediation Owner

Question 13

What entails requesting, reviewing, approving, or rejecting exceptions to a vulnerable item (VI) or remediation task (RT) that cannot be remediated according to the policy?

Answer 13

Exception management

Question 14

______________________________ is when you acknowledge and agree to the consequences of not remediating a vulnerability.

Answer 14

Risk acceptance

Question 15

______________________ is when you resolve a vulnerability and mitigate its risk.

Answer 15

Remediation

Question 16

Automatic exception approvals can be configured, based on:

Answer 16

Risk rating
Policy
Control objective