CompTIA CySA+ (CS0-003) — Question 4

Which of the following items should be included in a vulnerability scan report? (Choose two.)

Answer options

• A. Lessons learned
• B. Service-level agreement
• C. Playbook
• D. Affected hosts
• E. Risk score
• F. Education plan

Correct answer: D, E

Explanation

Including 'Affected hosts' and 'Risk score' in a vulnerability scan report is crucial as they provide specific information about which systems are vulnerable and the severity of those vulnerabilities. The other options, while potentially useful in different contexts, do not directly contribute to the technical assessment and outcomes of the vulnerability scan.