Which of the following is the PRIMARY concern with vulnerability assessments?

Which of the following is the PRIMARY concern with vulnerability assessments?
A . Threat mitigation
B . Report size
C . False positives

View Answer

Answer: C

Explanation:

The primary concern with vulnerability assessments is the presence of false positives. Here’s why: Threat Mitigation: While vulnerability assessments help in identifying potential vulnerabilities that need to be mitigated, this is not a concern but an objective of the assessment. It aims to provide information for better threat mitigation.

Report Size: The size of the report generated from a vulnerability assessment is not a primary concern. The focus is on the accuracy and relevance of the findings rather than the volume of the report.

False Positives: These occur when the vulnerability assessment incorrectly identifies a security issue that does not actually exist. False positives can lead to wasted resources as time and effort are spent investigating and addressing non-existent problems. They can also cause distractions from addressing real vulnerabilities, thus posing a significant concern.

The primary concern, therefore, is managing and reducing false positives to ensure the vulnerability assessment is accurate and effective.