Question
Which of the following items should be included in a vulnerability scan report? (Choose two.)
- A. Lessons learned
- B. Service-level agreement
- C. Playbook
- D. Affected hosts Correct
- E. Risk score Correct
- F. Education plan
Explanation
A vulnerability scan report lists each finding with the affected hosts and a risk or severity score so that remediation can be assigned and prioritized. Lessons learned belong to an incident post-mortem, a playbook is an incident response procedure, an SLA is a contractual document, and an education plan is a training artifact; none is part of the scan output.
