CompTIA CySA+ CS0-003 Practice Question

Vulnerability validation often requires manual intervention to verify the accuracy of the results provided by automated tools, which can sometimes generate false positives. Manual verification methods, such as reviewing system configurations, logs, and performing controlled tests, can help to confirm whether a vulnerability is indeed present or it was erroneously reported by the scanning tool. Re-scanning the asset or consulting online vulnerability databases would not provide this level of detailed confirmation. While system updates can address confirmed vulnerabilities, they do not serve as a method to validate the findings of a vulnerability scan.