Patches for two highly exploited vulnerabilities were released on the same Friday afternoon. Information about the systems and vulnerabilities is shown in the tables below: Which of the following shou

The correct answer is B. brady. Brady should be prioritized for remediation, as it has the highest risk score and the highest number of affected users. The risk score is calculated by multiplying the CVSS score by the exposure factor, which is the percentage of systems that are vulnerable to the exploit. Brady

Submitted by suresh_in· Mar 6, 2026Vulnerability Management

Question

Patches for two highly exploited vulnerabilities were released on the same Friday afternoon. Information about the systems and vulnerabilities is shown in the tables below:

Which of the following should the security analyst prioritize for remediation?

Exhibits

Options

Arogers
Bbrady
Cbrees
Dmanning

How the community answered

(51 responses)

A
6% (3)
B
59% (30)
C
14% (7)
D
22% (11)

Explanation

Brady should be prioritized for remediation, as it has the highest risk score and the highest number of affected users. The risk score is calculated by multiplying the CVSS score by the exposure factor, which is the percentage of systems that are vulnerable to the exploit. Brady has a risk score of 9 x 0.8 = 7.2, which is higher than any other system. Brady also has 500 affected users, which is more than any other system. Therefore, patching brady would reduce the most risk and impact for the organization. The other systems have lower risk scores and lower numbers of affected users, so they can be remediated later.

Topics

#vulnerability prioritization#patch management#risk assessment#exploitability

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice