Triage and Remediate Vulnerabilities GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company discovers a vulnerability in a legacy application that is no longer supported by the vendor. The application is critical to daily operations and cannot be replaced for six months. The vulnerability allows an authenticated user to escalate privileges. Which remediation strategy is most appropriate in this situation?

   • AAttempt to backport a patch from a newer version of the application.
   • BApply compensating controls, such as restricting access to the application and enforcing least-privilege accounts.
   • CAccept the risk and take no action until the application is replaced.
   • DDisconnect the application from the network immediately.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team remediated a vulnerability in a production server by applying a configuration change. The team verified the change and closed the finding. A month later, an auditor asks for evidence of the remediation. What should the team provide?

   • AThe vulnerability report, the configuration change details, the verification results, and the closure date.
   • BThe configuration change details only.
   • CThe original vulnerability report showing the finding.
   • DA verbal confirmation that the vulnerability was fixed.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What information should be recorded in a vulnerability remediation report?

   • AThe names of all employees in the organization.
   • BThe personal opinions of the security team.
   • CThe vulnerability identifier, severity, remediation action taken, and verification result.
   • DThe color of the vulnerability dashboard.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is reviewing a vulnerability in a web application that stores customer payment information. The vulnerability has a CVSS base score of 6.5, but the application is behind a WAF and requires multi-factor authentication (MFA) for all users. The team must decide whether to remediate the vulnerability or accept the risk. What should the team do?

   • ARemediate the vulnerability immediately because it affects payment information.
   • BRemediate the vulnerability only if the cost is low.
   • CAccept the risk without documenting the decision.
   • DDocument the compensating controls and accept the risk, because the WAF and MFA reduce the likelihood of exploitation.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst at a financial services company is triaging a newly reported vulnerability in an internal customer relationship management (CRM) application. The vulnerability has a CVSS base score of 9.8, but the application is only accessible from the internal corporate network, contains no sensitive customer data, and is scheduled for decommissioning in 60 days. The analyst must decide how to prioritize this finding. What should the analyst do first?

   • AIgnore the vulnerability entirely because the application is being decommissioned.
   • BImmediately escalate the vulnerability to the incident response team and request an emergency patch.
   • CApply the vendor patch immediately without further analysis because the CVSS score exceeds 9.0.
   • DDocument the CVSS score and the contextual mitigating factors, then schedule remediation to align with the decommissioning timeline.
   Reveal Solution Discussion Select an answer first