What is a purpose of a vulnerability management framework?

What is a purpose of a vulnerability management framework?
A . identifies, removes, and mitigates system vulnerabilities
B . detects and removes vulnerabilities in source code
C . conducts vulnerability scans on the network
D . manages a list of reported vulnerabilities

View Answer

Answer: A

Explanation:

A vulnerability management framework is a set of processes and tools that helps an organization identify, assess, prioritize, remediate, and mitigate system vulnerabilities. A vulnerability management framework aims to reduce the attack surface and the risk of compromise by applying security patches, hardening configurations, implementing security controls, and monitoring the system status. A vulnerability management framework is an essential component of a security operations center (SOC).

Reference: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) – Cisco, page 2-14; 200-201 CBROPS – Cisco, exam topic 1.2.b