Reference no: EM133276947
1. Is the National Vulnerability Database (NVD) privately owned or owned by a government?
Owned Privately
Owned by Government
2. What is the NIST Special Publication for Guide to Enterprise Patch Management Technologies?
NIST SP 800-40 Revision 3
NIST SP 800-99 Revision 2
NIST SP 756-22 Revision 4
NIST SP 800-40
3. When does Microsoft publish their patches for operating system software?
Third Monday of the month
Second Tuesday of the month
Every three months
Weekly
4. Are all vulnerabilities fixed by a patch from the vendor?
Yes
No
5. What is the purpose of a validation scan after remediating a vulnerability?
An attempt to exploit the asset.
To detect the configuration or patch that fixed the vulnerability.
To confirm the vulnerability is no longer present.
To deploy the remediation to the asset.