Exam CFR-310 topic 1 question 97 discussion

C. Assessing identified exposures Explanation: After performing an automatic vulnerability scan, the next step is to assess the identified exposures. This involves analyzing the vulnerabilities detected, determining their severity, and prioritizing which ones need to be addressed. Incorrect Responses: A. Hardening the infrastructure: This happens after the vulnerabilities are assessed and prioritized for remediation. B. Documenting exceptions: This step occurs after analyzing and addressing vulnerabilities, usually when certain vulnerabilities cannot be remediated for specific reasons. D. Generating reports: Reporting typically happens after the vulnerabilities have been assessed and remediated.