I agree with Ravn888 that its not C nor D.
An approval flow is provided OOTB for the Vulnerability Exception process as well, making B a possible answer.
However I would argue that what's actually needed by default to move a Remediation task to any exception states is an approval. Therefore I think A is correct.
https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/task/add-exception-approver.html
I think option B is correct.
GRC is not mandatory for an exception, it can be work without it
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
JBurns1979
2 weeks, 6 days agoDukeCheckem
4 months, 2 weeks agoRavn888
4 months, 2 weeks agoMiralles
1 year, 3 months agoPSIERRAM77
1 year, 3 months ago