During a Review of Vulnerability Scan Results, an Analyst Determines

question 28

Multiple Choice

During a review of vulnerability scan results, an analyst determines the results may be flawed because a control-baseline system, which is used to evaluate a scanning tool's effectiveness, was reported as not vulnerable. Consequently, the analyst verifies the scope of the scan included the control-baseline host, which was available on the network during the scan. The use of a control-baseline endpoint in this scenario assists the analyst in confirming:

• A) verification of mitigation.
• B) false positives.
• C) false negatives.
• D) the criticality index.
• E) hardening validation.

---

Definitions:

Report Header

A section at the beginning of a report that typically contains the report title, author, date, and other relevant information.

Group Footer

A section in report or document design that summarizes data or provides additional information at the end of a group section.

Record Source

The underlying data that provides the information displayed in a database object, such as a form or report.

Currency

The system of money in general use in a particular country, or the physical coins and banknotes that comprise this system.