Cosmo is reviewing a recent Nessus scan report and sees a number of items that have recently had compensating controls implemented for them. Which of the following terms might describe these items in the report?
A) Unvoided transaction
B) Uncaught exception
C) Error handling
D) False positive

Question

Quizplus · Accepted Answer

Compensating controls are implemented to mitigate the risk of vulnerabilities that cannot be fully remediated. If these controls are effective, the vulnerabilities might be considered false positives in the context of the scan report, as they do not pose a real threat due to the compensating controls.

Cosmo Is Reviewing a Recent Nessus Scan Report and Sees