CAS-005 · Question #182
A company must manage the remediation of several vulnerabilities. To do so, a security engineer assesses how software is used in the organization and finds the following: Which of the following…
The correct answer is B. File transfer solution data leakage. A vulnerability leading to "File transfer solution data leakage" should be remediated first because it implies sensitive data is actively exposed or at imminent risk, representing a critical breach of confidentiality with high business impact.
Question
A company must manage the remediation of several vulnerabilities. To do so, a security engineer assesses how software is used in the organization and finds the following:
Which of the following vulnerabilities should the security engineer remediate first?
Exhibits
Options
- ABuffer overflow
- BFile transfer solution data leakage
- CWeb server remote code execution
- DCRM privilege escalation
How the community answered
(48 responses)- A6% (3)
- B77% (37)
- C4% (2)
- D13% (6)
Why each option
A vulnerability leading to "File transfer solution data leakage" should be remediated first because it implies sensitive data is actively exposed or at imminent risk, representing a critical breach of confidentiality with high business impact.
A buffer overflow is a specific exploit that can lead to various outcomes, but 'data leakage' directly describes a critical impact on confidentiality, often requiring more urgent remediation.
A vulnerability causing "File transfer solution data leakage" is paramount to remediate immediately as it directly impacts data confidentiality, potentially leading to significant regulatory fines, reputational damage, and financial losses due to sensitive data exposure.
While web server remote code execution (RCE) is an extremely severe vulnerability that can lead to data leakage, the direct description of 'data leakage' in a file transfer solution suggests that the critical impact is already occurring or highly imminent and pervasive, often prioritizing the direct data compromise.
CRM privilege escalation is a high-impact vulnerability allowing unauthorized access to customer data, but 'data leakage' in a solution explicitly designed for data transfer implies a potentially broader or more direct and critical breach of confidentiality.
Concept tested: Vulnerability prioritization based on impact
Community Discussion
No community discussion yet for this question.

