CS0-003 · Question #560
A security analyst needs to prioritize vulnerabilities for patching. Given the following vulnerability and system information: Which of the following systems should the analyst patch first?
The correct answer is A. System 1. The task involves prioritizing system patching by evaluating various factors such as vulnerability severity, system criticality, and potential impact.
Question
A security analyst needs to prioritize vulnerabilities for patching. Given the following vulnerability and system information:
Which of the following systems should the analyst patch first?
Exhibit
Options
- ASystem 1
- BSystem 2
- CSystem 3
- DSystem 4
- ESystem 5
- FSystem 6
How the community answered
(29 responses)- A76% (22)
- B3% (1)
- C3% (1)
- D10% (3)
- E7% (2)
Why each option
The task involves prioritizing system patching by evaluating various factors such as vulnerability severity, system criticality, and potential impact.
System 1 should be patched first because, based on typical prioritization criteria, it would possess the highest combined risk score due to its vulnerability severity and the criticality of the system it represents, demanding immediate remediation.
System 2 would have a lower overall risk rating compared to System 1, indicating less urgency for immediate patching.
System 3 would have a lower overall risk rating compared to System 1, indicating less urgency for immediate patching.
System 4 would have a lower overall risk rating compared to System 1, indicating less urgency for immediate patching.
System 5 would have a lower overall risk rating compared to System 1, indicating less urgency for immediate patching.
System 6 would have a lower overall risk rating compared to System 1, indicating less urgency for immediate patching.
Concept tested: Vulnerability management and risk prioritization
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-prioritize-vulnerabilities?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.