nerdexam
CompTIA

CS0-003 · Question #389

A vulnerability scan of a web server that is exposed to the internet was recently completed. A security analyst is reviewing the resulting vector strings: Which of the following vulnerabilities…

The correct answer is A. Vulnerability 1. The question asks which vulnerability to patch first from a list of vector strings, implying a need to prioritize based on severity and potential impact to an internet-exposed web server.

Submitted by cyberguy42· Mar 6, 2026Vulnerability Management

Question

A vulnerability scan of a web server that is exposed to the internet was recently completed. A security analyst is reviewing the resulting vector strings:

Which of the following vulnerabilities should be patched first?

Options

  • AVulnerability 1
  • BVulnerability 2
  • CVulnerability 3
  • DVulnerability 4

How the community answered

(22 responses)
  • A
    82% (18)
  • B
    5% (1)
  • C
    5% (1)
  • D
    9% (2)

Why each option

The question asks which vulnerability to patch first from a list of vector strings, implying a need to prioritize based on severity and potential impact to an internet-exposed web server.

AVulnerability 1Correct

In a real-world scenario with CVSS vector strings, Vulnerability 1 would likely have the highest CVSS score, indicating a combination of high impact (Confidentiality, Integrity, Availability) and high exploitability (Attack Vector, Attack Complexity, Privileges Required, User Interaction), making it the most critical threat for an internet-exposed web server and thus the highest priority for patching.

BVulnerability 2

Vulnerability 2 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.

CVulnerability 3

Vulnerability 3 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.

DVulnerability 4

Vulnerability 4 would likely have a lower CVSS score compared to Vulnerability 1, indicating less severe impact or harder exploitability, thus making it a lower priority for immediate patching.

Concept tested: Prioritizing vulnerabilities based on CVSS scores

Source: https://www.first.org/cvss/v3.1/specification-document

Topics

#vulnerability scanning#patch prioritization#risk assessment#web server security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice