Vulnerability Prioritization CS0-003 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A vulnerability scanner reports a critical vulnerability on a server. Before acting, what is the most important step for the analyst to take?

   • AImmediately apply the vendor patch to all affected systems.
   • BIncrease the severity of the finding because it is on a server.
   • CIgnore the finding because scanner reports are often inaccurate.
   • DValidate the finding to confirm it is not a false positive and is relevant to the environment.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A vulnerability scanner reports a critical vulnerability in a software library used by a legacy application. The application is no longer supported by the vendor and is scheduled for replacement in six months. The library is not exposed to the internet and is only used internally. The analyst must decide how to handle the finding. What is the BEST course of action?

   • AIsolate the application from the network to eliminate the risk
   • BReplace the application immediately to eliminate the vulnerability
   • CPatch the library immediately because the CVSS score is critical
   • DDocument the finding as a risk accepted by management due to the low exposure and short remaining lifespan
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When assessing exploitability, what does the 'attack vector' component of CVSS indicate?

   • AThe complexity of the attack required to exploit the vulnerability
   • BThe path or context through which an attacker can exploit the vulnerability
   • CThe level of access an attacker needs to exploit the vulnerability
   • DThe potential impact on confidentiality, integrity, and availability
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst learns of a zero-day vulnerability in a widely used email client. There is no patch available, but a proof-of-concept exploit has been published. The organization uses this email client for all employees. What should the analyst do FIRST?

   • AImmediately uninstall the email client from all systems
   • BAnalyze the vulnerability to understand the attack vector and potential impact
   • CDisable the email client's internet access to prevent exploitation
   • DWait for the vendor to release a patch before taking any action
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization has two vulnerabilities to remediate: one on a public-facing web server that handles customer orders (CVSS 8.1, known exploit), and one on an internal file server that stores employee HR records (CVSS 9.0, no known exploit). The organization has limited resources. Which vulnerability should be prioritized?

   • AThe web server, because it is internet-facing and has a known exploit
   • BBoth equally, because both handle sensitive data
   • CThe file server, because it has a higher CVSS score
   • DThe file server, because HR records are more sensitive than customer orders
   Reveal Solution Discussion Select an answer first