A security analyst discovers a critical vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. The application must remain accessible to users. Which approach is the best example of a compensating control?

Documenting the vulnerability in the risk register and accepting the risk

Removing the application from the network to eliminate exposure

Deploying an intrusion prevention system (IPS) rule to block exploit traffic to the application

Scheduling a maintenance window to apply the vendor's latest patch

CompTIACySA+

Domain 2Objective 5

Vulnerability Response CS0-003 Practice Questions (Page 7)

Part of the Vulnerability management domain, which accounts for 30% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–33 in this domain), expect 4–7 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

30%of the exam

Questions 31–32

31foundation · easy
An organization wants to ensure that all servers are configured with the same security settings, such as password policies and firewall rules. Which practice is most directly responsible for maintaining this consistency?
Select an answer first
32foundation · easy
A security analyst discovers a critical vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. The application must remain accessible to users. Which approach is the best example of a compensating control?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

Vulnerability Response CS0-003 Practice Questions (Page 7)

Questions 31–32

An organization wants to ensure that all servers are configured with the same security settings, such as password policies and firewall rules. Which practice is most directly responsible for maintaining this consistency?

A security analyst discovers a critical vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. The application must remain accessible to users. Which approach is the best example of a compensating control?

Keep studying — Vulnerability management