Vulnerability Management

Question 1

What does a vulnerability assessment seek to identfy?

Answer 1

Any issues in a network, application, database or other system before it is used. This is a formal process.

Question 2

What is the practice of finding vulnerabilities?

Answer 2

Vulnerability management.

Note: The process is, Scan > Patch > Scan > repeating of course

Question 3

What 3 questions can help scope your vulnerability assessments?

Answer 3

1. What is the value of information that would be compromised?
2. What is the threat your system is facing?
3. What mitigation strategy could you deploy?

Question 4

Summarize the vulnerability process in 5 steps

Answer 4

1. Define the desired state of security (you cant stop every threat and you cant protect yourself from everything equally)
2. Create a baseline (set your “normal”)
3. Prioritize the vulnerabilities (which ones should be addressed first?)
4. Mitigate vulnerabilities (patching, controls, configurations)
5. Monitor the network and systems then rinse/repeat