GIAC Security Leadership Certification (GSLC) — Question 23

The CIS critical security sub-control 3.4, Deploy Automated Operating System Patch Management Tools, maps to which part of the PIACT vulnerability management process?

Answer options

• A. Treat
• B. Communicate
• C. Analyze
• D. Identify

Correct answer: D

Explanation

The correct answer is D, as deploying automated operating system patch management tools is primarily focused on identifying vulnerabilities that need to be patched. Options A, B, and C refer to different stages in the vulnerability management process that involve treating, communicating, or analyzing vulnerabilities rather than the initial identification phase.