2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   After applying a security patch to a web application, the security team wants to confirm that the patch was installed correctly and that the vulnerability is mitigated. Which action BEST verifies patch effectiveness?

   • AVerify that the patch file is present in the download directory
   • BCheck the application version and run a vulnerability scan against the application
   • CReview the patch release notes and trust that the vendor's patch works
   • DConfirm that the application is still functioning normally for users
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company discovers that its web server is running an outdated version of OpenSSL that is vulnerable to CVE-2022-3786 (buffer overflow). The server is behind a load balancer that terminates TLS, and the server is only accessible internally. What should the company do?

   • APatch only the load balancer because it handles TLS
   • BDo not patch because the load balancer terminates TLS and the server is internal
   • CPatch OpenSSL on the web server because the vulnerability is in the software itself
   • DWait for the next scheduled maintenance window without urgency
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A security team has identified three vulnerabilities in different systems: one is a critical remote code execution in an internet-facing web server, one is a high-severity privilege escalation in an internal application, and one is a moderate denial-of-service in a non-critical internal tool. Which patch should be applied first?

   • AApply all patches simultaneously to minimize the window of exposure
   • BThe critical remote code execution in the internet-facing web server
   • CThe high-severity privilege escalation in the internal application
   • DThe moderate denial-of-service in the non-critical internal tool
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security analyst is reviewing a vulnerability report for a web server. The report indicates that the installed version of Apache HTTP Server is 2.4.49 and that a known remote code execution vulnerability exists in this version. Which step is most important for determining whether the server is actually exposed and needs a patch?

   • ACheck whether the vulnerable module is enabled and the server is reachable from untrusted networks
   • BCheck the server's CPU and memory utilization to ensure it can handle a patch
   • CConfirm that the server is running on a physical machine rather than a virtual machine
   • DVerify that the server has a valid TLS certificate installed
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization has three servers with different vulnerabilities: Server A is exposed to the internet and has a critical remote code execution vulnerability with an active exploit; Server B is internal-only and has a high-severity vulnerability but no known exploit; Server C is a development server with a moderate vulnerability. All three have patches available. Which server should be patched first?

   • AServer C, because it is a development server and can be patched quickly.
   • BServer A, because it is internet-facing and has an actively exploited critical vulnerability.
   • CPatch all three simultaneously to reduce overall risk.
   • DServer B, because it is internal and the vulnerability is high severity.
   Reveal Solution Discussion Select an answer first