[Eye-catching] do I need to perform a vulnerability scan on the server environment before deploying an application? What should I do?

[Eye-catching] do I need to perform a vulnerability scan on the server environment before deploying an application? Or is this O & M? But if there is no O & M, do it yourself ., This is required, but not required. Generally, you only need to disable unnecessary ports and install all patches that can be used. Try to use the latest version of the server... if there is no O & M, it depends on what your boss thinks. most [eye-catching] servers need to perform vulnerability scanning before deploying applications?
Or is this O & M?
But if there is no O & M, do it yourself.

------ Solution --------------------
This is required, but not required. Generally, you only need to disable unnecessary ports and install all patches that can be used. Try to use the latest server version...

If there is no O & M, it depends on what your boss thinks. most of the time, they will not give the server to a newbie, but if he is also a newbie, at this time, we will give you more hands-on experience than him.
------ Solution --------------------
Of course, it is about O & M.
You may not have the permission to do your own jobs.