10 real Security+ questions.

Try one · from the demo

A widely used open-source logging library publishes a critical advisory on a Friday evening. The security team must know within the hour which of its 140 internal applications include that library, including where it arrives as a dependency of another dependency. Which practice provides this?

• Dynamic analysis of every application in staging
• A dark web threat feed subscription for the library's name
• A full rescan of every server with the network vulnerability scanner
• Package monitoring against each build's software bill of materials