CompTIA CySA+ (CS0-003) — Question 314

A security analyst is working on a server patch management policy that will allow the infrastructure team to be informed more quickly about new patches. Which of the following would most likely be required by the infrastructure team so that vulnerabilities can be remediated quickly? (Choose two.)

Answer options

• A. Hostname
• B. Missing KPI
• C. CVE details
• D. Baseline configuration
• E. IoCs
• F. npm identifier

Correct answer: A, C

Explanation

The correct answers are A and C because the hostname helps identify the specific server needing the patch, while CVE details provide the necessary information about the vulnerabilities being addressed. Options B, D, E, and F do not directly facilitate the rapid identification and remediation of vulnerabilities related to patching.