CS0-003 · Question #389
A vulnerability scan of a web server that is exposed to the internet was recently completed. A security analyst is reviewing the resulting vector strings: Which of the following vulnerabilities…
The correct answer is A. Vulnerability 1. The question asks which vulnerability to patch first from a list of vector strings, implying a need to prioritize based on severity and potential impact to an internet-exposed web server.
Question
A vulnerability scan of a web server that is exposed to the internet was recently completed. A security analyst is reviewing the resulting vector strings:
Which of the following vulnerabilities should be patched first?
Options
- AVulnerability 1
- BVulnerability 2
- CVulnerability 3
- DVulnerability 4
How the community answered
(22 responses)- A82% (18)
- B5% (1)
- C5% (1)
- D9% (2)
Why each option
The question asks which vulnerability to patch first from a list of vector strings, implying a need to prioritize based on severity and potential impact to an internet-exposed web server.
In a real-world scenario with CVSS vector strings, Vulnerability 1 would likely have the highest CVSS score, indicating a combination of high impact (Confidentiality, Integrity, Availability) and high exploitability (Attack Vector, Attack Complexity, Privileges Required, User Interaction), making it the most critical threat for an internet-exposed web server and thus the highest priority for patching.
Vulnerability 2 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.
Vulnerability 3 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.
Vulnerability 4 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.
Concept tested: Prioritizing vulnerabilities based on CVSS scores
Source: https://www.first.org/cvss/v3.1/specification-document
Topics
Community Discussion
No community discussion yet for this question.