CompTIA CySA+ (CS0-003) — Question 99

Which of the following stakeholders are most likely to receive a vulnerability scan report? (Choose two.)

Answer options

• A. Executive management
• B. Law enforcement
• C. Marketing
• D. Legal
• E. Product owner
• F. Systems administration

Correct answer: A, F

Explanation

The correct answers are A and F because executive management needs to be aware of potential risks to the organization, while systems administration is responsible for addressing any vulnerabilities. Law enforcement, marketing, legal, and product owners typically do not require access to such technical reports.