A vulnerability scanner reports a vulnerability with a CVSS base score of 9.8. The vulnerability is present on a server that is not exposed to the internet and is only accessible from the internal network. The analyst must decide how to prioritize remediation. What should the analyst do?

Remediate all other vulnerabilities first because this one is not exploitable.

Treat it as critical and remediate immediately because the CVSS score is very high.

Ignore the vulnerability because the server is not exposed to the internet.

Consider the CVSS score and the network exposure to determine the actual risk.

What is the primary purpose of a vulnerability scanner?

To identify potential security weaknesses in systems

To block all malicious network traffic

To exploit vulnerabilities to gain unauthorized access

To encrypt data at rest and in transit

CompTIASecurityX (CASP+)

Domain 3Objective 2

Vulnerability Management CAS-005 Practice Questions (Page 3)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

31%of the exam

Questions 11–15

11foundation · easy
Which SCAP component is specifically designed to represent security checklists and benchmarks?
Select an answer first
12application · medium
A vulnerability scanner reports a vulnerability with a CVSS base score of 9.8. The vulnerability is present on a server that is not exposed to the internet and is only accessible from the internal network. The analyst must decide how to prioritize remediation. What should the analyst do?
Select an answer first
13foundation · easy
What is the primary purpose of a vulnerability scanner?
Select an answer first
14foundation · easy
Which SCAP component would be used to identify that a system is running 'Microsoft Windows 10 Enterprise'?
Select an answer first
15foundation · easy
Which of the following is a component of SCAP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Vulnerability Management CAS-005 Practice Questions (Page 3)

Questions 11–15

Which SCAP component is specifically designed to represent security checklists and benchmarks?

A vulnerability scanner reports a vulnerability with a CVSS base score of 9.8. The vulnerability is present on a server that is not exposed to the internet and is only accessible from the internal network. The analyst must decide how to prioritize remediation. What should the analyst do?

What is the primary purpose of a vulnerability scanner?

Which SCAP component would be used to identify that a system is running 'Microsoft Windows 10 Enterprise'?

Which of the following is a component of SCAP?

Keep studying — Security engineering