Question 25: CloudSec-Pro: Palo Alto Networks Cloud Security Professional

A company receives a critical vulnerability finding with a CVSS score of 10 on a workload, which has been virtually patched with a WAF. The security team must appropriately track the issue based on the risk to the company environment and align to its risk management approach. Which step can the security team take in Cortex Cloud?

1. A. Fail builds containing the vulnerability in CI/CD pipelines.
2. B. Recast the CVSS score and vulnerability severity. — đáp án hiện tại
3. C. Tag the vulnerability as “Ignored”.
4. D. Ensure the issue is sent to the SOC for analysis.