300-910 · Question #50
An application for storing and categorizing has been developed. The application uses dual-factor authentication for user access. After authentication, users can upload sensitive data. The application
The correct answer is D. Apply all the latest patches and updates. To prevent new security threats after a system exploit, the most crucial action is to consistently apply all the latest patches and updates to address known vulnerabilities.
Question
Exhibit
Options
- AUse self-developed algorithms for encryption
- BInstall virtual firewalls
- CActively change the ISP provider
- DApply all the latest patches and updates
How the community answered
(18 responses)- A6% (1)
- D94% (17)
Why each option
To prevent new security threats after a system exploit, the most crucial action is to consistently apply all the latest patches and updates to address known vulnerabilities.
Using self-developed algorithms for encryption is a highly discouraged security practice, as custom cryptography is often insecure and introduces more vulnerabilities than it solves.
While installing virtual firewalls is part of a good security posture to control network traffic, they primarily prevent unauthorized access attempts rather than directly addressing internal system exploits caused by unpatched software.
Changing the ISP provider has no direct impact on preventing 'system exploits' against an application or server, as these exploits target vulnerabilities within the system itself, not the network connectivity provider.
System exploits typically leverage known vulnerabilities in operating systems, applications, or libraries. Regularly applying all available patches and updates is the most fundamental and effective security measure to fix these vulnerabilities, thereby preventing attackers from exploiting them in the future.
Concept tested: Vulnerability management and patching
Source: https://www.cisa.gov/resources-tools/resources/cybersecurity-best-practices-guide/patch-management
Topics
Community Discussion
No community discussion yet for this question.
