Study. uk . com
  1. Home
  2. All questions
  3. Question 138

CompTIA Security+ study material · question 138 of 611

Which activity separates a scanner finding from a confirmed vulnerability?

  1. Rescanning with a different tool
  2. Recording it in the risk register
  3. Assigning a CVSS environmental score
  4. Validation, such as attempting exploitation
Show the answer

Answer: D. Validation, such as attempting exploitation

Validation techniques confirm the finding is real; without them the report holds candidates rather than confirmed weaknesses.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 5 Target Vulnerability Validation Techniques

Challenge yourself on this topic → Study as cards