Triage and Remediate Vulnerabilities GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security analyst is triaging two vulnerabilities. Vulnerability A has a CVSS base score of 8.0 and affects a public-facing web server that hosts the company's marketing website, which contains no sensitive data. Vulnerability B has a CVSS base score of 6.5 and affects an internal application that processes employee payroll data. Both vulnerabilities are remotely exploitable. Which vulnerability should be remediated first?

   • ABoth vulnerabilities simultaneously, because both are remotely exploitable.
   • BVulnerability A, because public-facing systems are always higher risk.
   • CVulnerability A, because it has the higher CVSS base score.
   • DVulnerability B, because it affects sensitive payroll data, despite the lower CVSS score.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is triaging a vulnerability in a public-facing application. The vulnerability has a CVSS base score of 9.0 and allows remote code execution. The team has a patch available, but applying it requires a 15-minute downtime. The application has a 99.9% uptime SLA, and the team has a maintenance window scheduled for next week. What should the team do?

   • ATake the application offline until the maintenance window.
   • BApply the patch immediately, accepting the 15-minute downtime.
   • CApply the patch during the scheduled maintenance window, and implement a temporary WAF rule to mitigate the vulnerability in the interim.
   • DWait for the scheduled maintenance window without any interim mitigation.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which method is commonly used to verify that a vulnerability has been remediated?

   • AChecking the vendor's website for a new CVE ID.
   • BAsking the system administrator if they think it's fixed.
   • CRe-running the vulnerability scanner against the affected asset.
   • DReviewing the vulnerability's CVSS vector string.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which factor is most directly considered when assessing the exploitability of a reported vulnerability during triage?

   • AWhether a public exploit exists or the attack complexity is low.
   • BThe number of security patches released by the vendor in the last year.
   • CThe cost of the affected software license.
   • DThe name of the vulnerability scanner that detected it.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of verification after applying a remediation action?

   • ATo notify the security team that the vulnerability was found.
   • BTo confirm the vulnerability is resolved and no new issues were introduced.
   • CTo document the remediation for compliance purposes.
   • DTo assign a new CVSS score to the vulnerability.
   Reveal Solution Discussion Select an answer first