Vulnerability Management

Question 1

What is the first step in the VM Lifecycle?

Answer 1

1. Identification

Finding vulnerabilities in systems, applications and networks

Question 2

What is the second step in the VM Lifecycle?

Answer 2

2. Classification

Categorizing vulnerabilities based on type and severity

Question 3

What is the third step in the VM Lifecycle?

Answer 3

3. Analysis

Assessing the impact and risk level from 1-10 (CVSS)

Question 4

What is the fourth step in the VM Lifecycle?

Answer 4

4. Prioritization

Determining which vulnerabilities to fix first based on risk

Question 5

What is the fifth step in the VM Lifecycle?

Answer 5

5. Reporting

Documenting vulnerabilities, findings & remediation plans

Question 6

What is the sixth step in the VM Lifecycle?

Answer 6

6. Remediation

Applying fixes, patches (updating software), configuration changes or up

Question 7

What is the seventh step in the VM Lifecycle?

Answer 7

7. Mitigation

Reducing risk when a full fix isn’t immediately possible

Question 8

What is the VM Lifecycle?

Answer 8

The VM Lifecycle is the process of identifying, classifying, analyzing, prioritizing, remediating, and mitigating vulnerabilities to reduce security risks in an organization.