Palo_Alto_Networks
CLOUDSEC-PRO · Question #162
An SCA scan detects a library with a critical CVE and no available patch. The recommended approach is to:
The correct answer is A. Replace the library with a secure alternative. If no patch exists, replacing the vulnerable dependency with a secure alternative prevents exploitation while maintaining functionality.
Software Composition Analysis
Question
An SCA scan detects a library with a critical CVE and no available patch. The recommended approach is to:
Options
- AReplace the library with a secure alternative
- BIgnore the issue until a patch is released
- CPrint the scan report
- DDisable application security testing
How the community answered
(22 responses)- A82% (18)
- B5% (1)
- C5% (1)
- D9% (2)
Explanation
If no patch exists, replacing the vulnerable dependency with a secure alternative prevents exploitation while maintaining functionality.
Topics
#SCA#CVE remediation#library replacement#patch management
Community Discussion
No community discussion yet for this question.