nerdexam
CompTIA

CS0-003 · Question #574

A vulnerability scan shows the following issues: At the same time, the following security advisory was released: "A zero-day vulnerability with a CVSS score of 10 may be affecting your web server. The

The correct answer is D. Forward the advisory to the web security team and initiate the prioritization strategy for the other. CySA+ emphasizes communication, coordination, and prioritization-forwarding the advisory ensures the right team is informed and can begin mitigation or monitoring. Simultaneously, prioritizing known critical vulnerabilities (like the storage server and firewall) aligns with best

Submitted by luis.pe· Mar 6, 2026Vulnerability Management

Question

A vulnerability scan shows the following issues:

At the same time, the following security advisory was released:

"A zero-day vulnerability with a CVSS score of 10 may be affecting your web server. The vendor is working on a patch or workaround." Which of the following actions should the security analyst take first?

Exhibit

CS0-003 question #574 exhibit

Options

  • AContact the web systems administrator and request that they shut down the asset.
  • BMonitor the patch releases for all items and escalate patching to the appropriate team.
  • CRun the vulnerability scan again to verify the presence of the critical finding.
  • DForward the advisory to the web security team and initiate the prioritization strategy for the other

How the community answered

(57 responses)
  • A
    5% (3)
  • B
    14% (8)
  • C
    7% (4)
  • D
    74% (42)

Explanation

CySA+ emphasizes communication, coordination, and prioritization-forwarding the advisory ensures the right team is informed and can begin mitigation or monitoring. Simultaneously, prioritizing known critical vulnerabilities (like the storage server and firewall) aligns with best practices in vulnerability management and risk reduction.

Topics

#vulnerability prioritization#zero-day#CVSS#security advisory

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice