CompTIA PenTest+ Practice Test

In vulnerability assessment, what does log disposition refer to?

1. Collecting user logs

2. Identifying log storage

3. Tracking log changes

4. Managing logs related to vulnerabilities

The correct answer is: Managing logs related to vulnerabilities

Log disposition in the context of vulnerability assessment refers specifically to the management of logs that are associated with vulnerabilities. This includes determining how these logs are handled, stored, and processed to ensure that they provide actionable insights for identifying, mitigating, and tracking vulnerabilities effectively. Managing logs related to vulnerabilities is crucial because it allows security teams to analyze patterns, detect any anomalies, and respond promptly to incidents. Proper log management can also contribute to compliance with regulations and help in forensic investigations after a security breach. In contrast to this, the other options focus on aspects of logging that are not specifically tied to the vulnerability assessment process, such as the mere collection of logs or the identification of where logs are stored. While those activities are important, they do not encapsulate the full scope and intent behind log disposition within vulnerability management. Logging changes is valuable for maintaining integrity but again does not encompass the broader strategic management of logs in relation to vulnerabilities.