Study. uk . com
  1. Home
  2. All questions
  3. Question 176

CompTIA Security+ study material · question 176 of 611

How does an organisation learn that a library it depends on has become vulnerable?

  1. By reviewing the plan of action and milestones
  2. By subscribing to vendor advisories and the National Vulnerability Database
  3. By waiting for the next scheduled penetration test
  4. By monitoring outbound network traffic
Show the answer

Answer: B. By subscribing to vendor advisories and the National Vulnerability Database

Vulnerability feeds paired with a component inventory are what turn a public disclosure into an internal ticket.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.2 Software Vulnerability Management Life Cycle

Challenge yourself on this topic → Study as cards