Certified in Risk and Information Systems Control (CRISC) — Question 893

Which of the following would be a risk practitioner's GREATEST concern with the use of a vulnerability scanning tool?

Answer options

• A. Increased time to remediate vulnerabilities
• B. Inaccurate reporting of results
• C. Increased number of vulnerabilities
• D. Network performance degradation

Correct answer: B

Explanation

The correct answer is B because inaccurate reporting can lead to misinformed decisions about security risks, potentially leaving critical vulnerabilities unaddressed. The other options, while valid concerns, do not directly impact the reliability of the scanning tool's findings as much as inaccurate reporting does.