Vulnerability Management GSLC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which sequence correctly represents the typical phases of the vulnerability management lifecycle?

   • AIdentification, assessment, remediation, verification
   • BRemediation, assessment, identification, verification
   • CAssessment, identification, verification, remediation
   • DVerification, remediation, assessment, identification
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A vulnerability scan identified a remote code execution vulnerability in a web application that is exposed to the internet. The same vulnerability also exists on an internal development server that is not accessible from the internet. The web application is a critical business system, while the development server is used by a small team. Which vulnerability should be remediated first?

   • AThe development server because it is easier to patch.
   • BBoth at the same time because they have the same vulnerability.
   • CThe web application because it is internet-facing and a critical business system.
   • DThe development server because it is internal and less likely to be attacked.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is reviewing a vulnerability scan report. The report shows a vulnerability with a CVSS score of 9.8 on a server that hosts a public-facing marketing website. The same vulnerability also appears on an internal file server with a CVSS score of 9.8. The marketing website is not critical to business operations, while the file server contains sensitive employee data. Which vulnerability should be remediated first?

   • AThe file server because it contains sensitive data, even though it is internal.
   • BThe marketing website because it is public-facing.
   • CThe marketing website because it is easier to patch.
   • DBoth at the same time because they have the same CVSS score.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has just experienced a security incident where an attacker exploited a known vulnerability in a public-facing web server. The vulnerability had been identified in a scan three months ago but was not remediated. The incident response team has contained the breach. What should the vulnerability management team do next to prevent a recurrence?

   • AReview the incident response plan and update it based on lessons learned.
   • BRe-scan the affected server and prioritize remediation of the exploited vulnerability.
   • CReport the incident to the regulatory authorities.
   • DConduct a new risk assessment for all public-facing servers.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A financial services firm discovers a critical vulnerability in a third-party application that processes customer transactions. The vendor has released a patch, but the patch is known to cause intermittent downtime during business hours. The firm cannot afford downtime during peak transaction hours. Which remediation approach best balances security and business continuity?

   • ADo not apply the patch and accept the risk because downtime is worse than a potential breach
   • BApply the patch during the next scheduled maintenance window, and implement a compensating control such as enhanced monitoring until then
   • CAsk the vendor for a different patch that does not cause downtime
   • DApply the patch immediately, even if it causes downtime during peak hours
   Reveal Solution Discussion Select an answer first