SY0-701 - Security Operations - Section 4.3

Explain various activities associated with vulnerability management.

Describe the vulnerability management lifecycle from scanning and CVSS-based prioritisation through remediation, and distinguish authenticated vulnerability scanning from penetration testing in terms of depth and authorisation. Recognise the role of responsible disclosure in coordinating the reporting of newly discovered vulnerabilities between researchers and affected vendors.

Examworthy is not affiliated with or endorsed by CompTIA. Original, blueprint-aligned practice material only.