Triage and Remediate Vulnerabilities GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security administrator remediated a vulnerability in a database by applying a vendor patch. The administrator wants to verify the patch did not break the application that uses the database. What should the administrator do?

   • AAsk the application owner to manually test a few features.
   • BRun the application's automated test suite and confirm all tests pass.
   • CCheck the database error logs for new errors.
   • DConfirm the patch is installed and assume the application works.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which remediation action directly addresses a vulnerability caused by a misconfigured firewall rule?

   • ADisable the firewall entirely.
   • BReplace the firewall hardware with a newer model.
   • CChange the firewall configuration to restrict unnecessary inbound traffic.
   • DApply the latest operating system patches.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst is triaging two vulnerabilities in a company's environment. Vulnerability A has a CVSS base score of 7.5 and affects a public-facing web server that handles payment transactions. Vulnerability B has a CVSS base score of 9.0 and affects an internal development server that contains no production data. Both vulnerabilities are remotely exploitable. Which vulnerability should be remediated first?

   • ABoth vulnerabilities simultaneously, because both are remotely exploitable.
   • BVulnerability B, because it has the higher CVSS base score.
   • CVulnerability B, because development servers are often less monitored.
   • DVulnerability A, because it affects a public-facing system handling sensitive payment data.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security team remediated a critical vulnerability in a production database server. The team applied a vendor patch, verified the fix, and closed the finding in the vulnerability management tool. A compliance auditor later asks for evidence of the remediation. What should the team provide to satisfy the audit requirement?

   • AA report containing the vulnerability details, the triage decision, the remediation action taken, the verification results, and the date of closure.
   • BThe original vulnerability scan report showing the finding.
   • CThe vendor's patch release notes and a screenshot of the server's patch level.
   • DA verbal explanation of the remediation steps taken by the team.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is triaging a vulnerability report for a company's email server. The vulnerability is a denial-of-service (DoS) flaw that requires an authenticated account to exploit. The email server is critical to business operations, and the company has a strict uptime requirement. What should the analyst prioritize during triage?

   • AThe exploitability of the flaw, given that it requires authentication, and the potential impact on email availability.
   • BThe cost of the remediation effort compared to the cost of the email server.
   • CThe CVSS base score alone, without considering the authentication requirement.
   • DThe number of users affected by a potential email outage.
   Reveal Solution Discussion Select an answer first