What is vulnerability management and how should a TA coordinate remediation?

• A. Identify vulnerabilities only after a breach.
• B. Remediate vulnerabilities first, then identify them.
• C. Verify vulnerabilities without remediation.
• D. Identify, classify, remediate, verify vulnerabilities; prioritize by risk; apply patches or mitigations and re-attest to confirm effectiveness.

Answer: (D)

The idea being tested is that vulnerability management is an ongoing, end-to-end process where risks are identified, understood, acted upon, and then re-checked to ensure controls work.

A trusted agent coordinates remediation by first identifying weaknesses through scans and threat intelligence, then classifying them by risk to determine which are mostCritical or likely to be exploited. Next comes remediation: applying patches, changing configurations, or using mitigations, all prioritized by risk to make the best use of limited resources. After fixes are applied, verification or re-attestation confirms that the vulnerabilities were successfully mitigated and that the overall risk level has been reduced. This closed loop—identify, classify, remediate, verify, with risk-based prioritization and re-attestation—is what makes vulnerability management effective.

The other approaches are incomplete or reactive: waiting to identify vulnerabilities only after a breach leaves you unprepared; remediation without prior identification is illogical; and verifying without remediation leaves risk unaddressed and unverified.