Vulnerability Remediation CCOA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A vulnerability scan identifies that a server has an unnecessary service enabled, which increases the attack surface. The service is not used by any application. Which remediation technique is the most appropriate?

   • ARestrict network access to the service using a firewall.
   • BMonitor the service for suspicious activity.
   • CDisable the unnecessary service.
   • DApply a security patch to the service.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst has completed remediation of a high-risk vulnerability in a customer-facing application. The remediation involved applying a patch and implementing a compensating control. Which information is most important to include in the remediation report to stakeholders?

   • AThe vulnerability score and the number of systems affected.
   • BThe exact date and time the patch was applied and the names of the technicians who performed the work.
   • CThe cost of the remediation and the time spent by the security team.
   • DA summary of the remediation actions taken, the verification results, and any residual risk that remains.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of remediation reporting?

   • ATo document and communicate remediation activities, outcomes, and residual risks to stakeholders.
   • BTo replace the need for vulnerability scanning.
   • CTo automatically patch all vulnerabilities.
   • DTo assign blame for vulnerabilities that were not fixed.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team has applied a configuration change to remediate a vulnerability. After the change, the team wants to verify that the change was effective. Which action is the most reliable way to verify the remediation?

   • ARe-run the vulnerability scan to confirm the vulnerability is no longer detected.
   • BReview the configuration change in the change management system.
   • CMonitor system logs for errors after the change.
   • DAsk the system administrator if the change was successful.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security team has a limited budget for remediation. They have identified a critical vulnerability in a system that is not exposed to the internet, and a high vulnerability in a system that is internet-facing. The team can only remediate one system this quarter. Which system should be prioritized?

   • AThe high vulnerability in the internet-facing system, because it is more exposed.
   • BNeither system, since the budget is limited.
   • CThe critical vulnerability in the internal system, because it has a higher severity.
   • DBoth systems equally, since both are important.
   Reveal Solution Discussion Select an answer first