Which function of GenAI is highlighted in vulnerability management?

• A. Prioritize patches from thousands of options and support zero-trust policy implementation
• B. Automatically patch all vulnerabilities without human input
• C. Replace the need for vulnerability scanners
• D. Generate false positives for alerts

Answer: (A)

GenAI in vulnerability management excels at handling large volumes of remediation options and aligning those options with security policy. In most enterprises, there are thousands of patches, mitigations, and configuration changes to consider across different systems and environments. GenAI can pull together vulnerability details (severity, exploit likelihood, asset criticality, patch availability, testing requirements, and dependencies) and produce a risk-based prioritization. It can suggest the sequence in which patches should be deployed to reduce the greatest risk first, while also factoring in change management constraints and business impact.

This capability naturally fits a zero-trust approach because the AI can incorporate policy-driven controls into remediation planning. It can recommend patches and deployment steps that respect authentication, authorization, least-privilege, and segment-based access, ensuring that patching activities themselves don’t broaden risk and that updates are verifiable and auditable. By focusing on prioritization and policy-aligned execution, GenAI helps teams act quickly and accurately without sacrificing security controls.

It’s not about patching everything automatically without human input, nor about replacing vulnerability scanners, nor about generating false positives. Those would undermine safety, accuracy, or situational awareness.