Which tool is used for managing vulnerabilities in cyber systems?

• A. Microsoft Endpoint Configuration Manager (MECM)
• B. Splunk
• C. Active Directory (AD)
• D. Emergency Operating Procedures (EOPs)

Answer: (A)

Managing vulnerabilities relies on centralized patch and configuration management across all endpoints. Microsoft Endpoint Configuration Manager is designed for this role: it inventories devices, deploys and schedules patches and updates, and enforces security baselines and configurations. By actively pushing fixes and ensuring systems stay configured to secure standards, it directly reduces exposure from known vulnerabilities, making it the best fit among the options.

Splunk, while excellent for collecting and analyzing logs to detect issues, isn’t a patching or vulnerability remediation tool. Active Directory handles identity, access, and policy distribution but not the actual process of remediation across endpoints. Emergency Operating Procedures are steps for responding to incidents, not a tool for vulnerability management.