Vulnerability Remediation CCOA Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   What is the purpose of remediation verification?

   • ATo confirm that the vulnerability has been resolved and no new issues were introduced.
   • BTo identify new vulnerabilities that were previously missed.
   • CTo document the remediation steps for future reference.
   • DTo assign a severity score to the vulnerability.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst applied a configuration change to disable a vulnerable service on a server. After the change, the analyst wants to verify that the remediation was successful. Which action provides the most reliable verification?

   • AAsk the system administrator if the service was disabled.
   • BMonitor network traffic to see if the service is no longer responding.
   • CReview the change management ticket to confirm the change was approved.
   • DCheck the service status to confirm it is stopped and re-run the vulnerability scan.
   Reveal Solution Discussion Select an answer first
3. 23expert · hard

   A security team has identified multiple vulnerabilities in their environment: a critical vulnerability in an internet-facing web server, a high vulnerability in an internal file server, and a medium vulnerability in a development workstation. The team has limited resources and can only remediate one vulnerability this week. Which vulnerability should be prioritized?

   • AThe medium vulnerability in the development workstation.
   • BThe critical vulnerability in the internet-facing web server.
   • CThe high vulnerability in the internal file server.
   • DAll vulnerabilities equally, since all should be remediated.
   Reveal Solution Discussion Select an answer first