A vulnerability scan has identified a critical vulnerability in a legacy system that is no longer supported by the vendor. The system is critical to operations and cannot be replaced in the short term. The security team has implemented a virtual patch using an IPS. What is the most important next step?

Disable the legacy system until a permanent fix is available

Monitor the IPS logs to ensure the virtual patch is effectively blocking exploit attempts

Document the virtual patch in the vulnerability report and close the finding

Immediately replace the legacy system with a modern alternative

Which of the following is a common method used to validate that a vulnerability has been remediated?

Reviewing the system's event logs

Rescanning the system with a vulnerability scanner

Asking the system administrator

A vulnerability scan identified a medium-severity vulnerability in a web server. The security team has applied a configuration change to mitigate the issue. What is the next step in the vulnerability management process?

Inform the system owner of the vulnerability

Update the vulnerability management policy

Validate that the configuration change has resolved the vulnerability

Close the vulnerability ticket without further action

A company's vulnerability scanner has identified a critical remote code execution vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. The application is business-critical and cannot be taken offline. Which remediation strategy should the security team implement first?

Uninstall the application and replace it with a modern, supported alternative

Apply a virtual patch using a web application firewall (WAF) or intrusion prevention system (IPS)

Disable the application until the vendor releases a patch

Increase the frequency of vulnerability scans to detect any changes

What is the purpose of a remediation plan?

To identify new vulnerabilities in the environment

To assign severity scores to vulnerabilities

To verify that vulnerabilities have been fixed

To document the steps needed to fix identified vulnerabilities

CompTIASecurity+

Domain 4Objective 3

Vulnerability Management SY0-701 Practice Questions (Page 4)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

28%of the exam

Questions 16–20

16expert · hard
A vulnerability scan has identified a critical vulnerability in a legacy system that is no longer supported by the vendor. The system is critical to operations and cannot be replaced in the short term. The security team has implemented a virtual patch using an IPS. What is the most important next step?
Select an answer first
17foundation · easy
Which of the following is a common method used to validate that a vulnerability has been remediated?
Select an answer first
18application · medium
A vulnerability scan identified a medium-severity vulnerability in a web server. The security team has applied a configuration change to mitigate the issue. What is the next step in the vulnerability management process?
Select an answer first
19application · medium
A company's vulnerability scanner has identified a critical remote code execution vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. The application is business-critical and cannot be taken offline. Which remediation strategy should the security team implement first?
Select an answer first
20foundation · easy
What is the purpose of a remediation plan?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Vulnerability Management SY0-701 Practice Questions (Page 4)

Questions 16–20

Which of the following is a common method used to validate that a vulnerability has been remediated?

A vulnerability scan identified a medium-severity vulnerability in a web server. The security team has applied a configuration change to mitigate the issue. What is the next step in the vulnerability management process?

What is the purpose of a remediation plan?

Keep studying — Security operations