Câu 12: CS0-001: CompTIA CySA+ Certification Exam

An organization wants to remediate vulnerabilities associated with its web servers. An initial vulnerability scan has been performed, and analysts are reviewing the results. Before starting any remediation, the analysts want to remove false positives to avoid spending time on issues that are not actual vulnerabilities. Which of the following would be an indicator of a likely false positive?

1. A. Reports show the scanner compliance plug-in is out-of-date.
2. B. Any items labeled "˜low' are considered informational only. — đáp án hiện tại
3. C. The scan result version is different from the automated asset inventory.
4. D. "˜HTTPS' entries indicate the web page is encrypted securely.