nerdexam
CompTIA

CS0-003 · Question #15

A security analyst obtained the following table of results from a recent vulnerability assessment that was conducted against a single web server in the environment: Which of the following should be…

The correct answer is D. Perform proper sanitization on all fields. The first action that should be completed to remediate the findings is to perform proper sanitization on all fields. Sanitization is a process that involves validating, filtering, or encoding any user input or data before processing or storing it on a system or application…

Submitted by cyberguy42· Mar 6, 2026Vulnerability Management

Question

A security analyst obtained the following table of results from a recent vulnerability assessment that was conducted against a single web server in the environment:

Which of the following should be completed first to remediate the findings?

Exhibit

CS0-003 question #15 exhibit

Options

  • AAsk the web development team to update the page contents
  • BAdd the IP address allow listing for control panel access
  • CPurchase an appropriate certificate from a trusted root CA
  • DPerform proper sanitization on all fields

How the community answered

(34 responses)
  • A
    9% (3)
  • B
    3% (1)
  • C
    3% (1)
  • D
    85% (29)

Explanation

The first action that should be completed to remediate the findings is to perform proper sanitization on all fields. Sanitization is a process that involves validating, filtering, or encoding any user input or data before processing or storing it on a system or application. Sanitization can help prevent various types of attacks, such as cross-site scripting (XSS), SQL injection, or command injection, that exploit unsanitized input or data to execute malicious scripts, commands, or queries on a system or application. Performing proper sanitization on all fields can help address the most critical and common vulnerability found during the vulnerability assessment,

Topics

#Web application security#Input sanitization#Vulnerability remediation#SQL injection

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice