Exam CFR-310 topic 1 question 95 discussion

B. Identifying critical assets Explanation: It’s essential to identify critical assets so that you know which systems, data, and resources are most important and need to be prioritized during the vulnerability assessment. C. Establishing scope Explanation: Establishing the scope of the assessment defines what parts of the network will be tested, what vulnerabilities are being targeted, and any limitations or exclusions. It ensures that the assessment is focused and organized. Incorrect Responses: A. Identifying exposures: While important, this is part of the assessment process, not essential in the planning phase. D. Running scanning tools: This is a task done during the actual assessment, not in the planning phase. E. Installing antivirus software: Antivirus software is a security measure but not directly related to planning a vulnerability assessment.