3.9 Recommend the General Mitigation Steps to Address Vulnerability Issues 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary goal of the vulnerability mitigation process in a network environment?

   • ATo identify every vulnerability in the environment and document it for compliance purposes only
   • BTo eliminate all possible security risks so that no threats can ever affect the network
   • CTo transfer all security risks to an external managed security service provider
   • DTo reduce the likelihood and impact of vulnerabilities being exploited to an acceptable level
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which factor is most important when prioritizing which vulnerabilities to remediate first?

   • AThe risk score based on severity, exploitability, and asset criticality
   • BThe cost of the remediation effort
   • CThe number of systems affected by the vulnerability
   • DThe age of the vulnerability disclosure
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which access control principle is most effective at limiting the impact of a compromised account?

   • AImplementing the principle of least privilege so users have only the permissions necessary for their role
   • BProviding all users with administrative privileges to increase productivity
   • CUsing shared accounts for team collaboration
   • DGranting access based on the user's seniority rather than job function
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A vulnerability has a high CVSS score but is present only on a non-critical internal server that is not exposed to the internet. How should this vulnerability be prioritized?

   • ANo priority because the server is internal
   • BLowest priority because the server is not critical
   • CHighest priority because the CVSS score is high
   • DMedium priority because the risk is reduced by the server's low criticality and limited exposure
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Why is continuous monitoring important in the context of vulnerability mitigation?

   • AIt guarantees that no vulnerability will be exploited
   • BIt eliminates the need for regular vulnerability scanning
   • CIt allows the organization to detect exploitation attempts and respond before significant damage occurs
   • DIt replaces the need for patch management
   Reveal Solution Discussion Select an answer first