CS0-003 · Question #219
The security analyst received the monthly vulnerability report. The following findings were included in the report: - Five of the systems only required a reboot to finalize the patch application…
The correct answer is A. Compensating controls. Compensating controls are the best approach to minimize the risk of the outdated servers being compromised, as they can provide an alternative or additional layer of security when the primary control is not feasible or effective. Compensating controls are security measures that…
Question
The security analyst received the monthly vulnerability report. The following findings were included in the report:
- Five of the systems only required a reboot to finalize the patch
application
- Two of the servers are running outdated operating systems and cannot
be patched The analyst determines that the only way to ensure these servers cannot be compromised is to isolate them. Which of the following approaches will best minimize the risk of the outdated servers being compromised?
Options
- ACompensating controls
- BDue diligence
- CMaintenance windows
- DPassive discovery
How the community answered
(48 responses)- A77% (37)
- B13% (6)
- C6% (3)
- D4% (2)
Explanation
Compensating controls are the best approach to minimize the risk of the outdated servers being compromised, as they can provide an alternative or additional layer of security when the primary control is not feasible or effective. Compensating controls are security measures that are implemented to mitigate the risk of a vulnerability or an attack when the primary control is not feasible or effective. For example, if the servers are running outdated operating systems and cannot be patched, a compensating control could be to isolate them from the rest of the network, or to implement a firewall or an intrusion prevention system to monitor and block any malicious traffic to or from the servers. Compensating controls can help reduce the likelihood or impact of an exploit, but they do not eliminate the risk completely. Therefore, the security analyst should also consider upgrading or replacing the outdated servers as soon as possible.
Topics
Community Discussion
No community discussion yet for this question.