Triage and Remediate Vulnerabilities GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A security engineer applied a configuration change to a firewall to remediate a vulnerability that allowed unauthorized access to an internal service. After the change, the engineer wants to verify the remediation. What is the most reliable way to confirm the vulnerability is resolved?

   • AAsk the service owner to confirm the service is still accessible to authorized users.
   • BAttempt to access the internal service from an external network and confirm the connection is blocked.
   • CReview the firewall configuration and confirm the rule was added.
   • DCheck the firewall logs for blocked connection attempts.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When determining remediation priority, which contextual factor should be considered in addition to the CVSS score?

   • AThe number of characters in the CVE identifier.
   • BThe name of the vulnerability scanner vendor.
   • CThe color scheme of the vulnerability management dashboard.
   • DThe criticality of the affected system to business operations.
   Reveal Solution Discussion Select an answer first