Free CompTIA CySA+ CS0-003 Practice Question

The correct answer is 'B - Defining the expected service level, including responsiveness and resolution times, between the cybersecurity team and the organization'. An SLA in cybersecurity vulnerability management establishes the expectations between the security teams and the organization or service provider, ensuring that there are agreed-upon response and resolution times for addressing vulnerabilities. Answer 'A' is incorrect because an SLA is not a report of vulnerabilities; it is an agreement that can dictate the timeline and quality of the management of such vulnerabilities. Answer 'C' is incorrect as an SLA does not by itself reduce response times but sets the standards for what those response times should be. Answer 'D' is incorrect as an SLA is not primarily for inventory purpose but the agreement could impact how inventory is handled.