nerdexam
CompTIA

CS0-003 · Question #605

The most recent vulnerability scan results show the following: The vulnerability team learned the following from the asset owners: - Server HQFIN01 is a financial transaction database server used in…

The correct answer is C. Reference the BIA to determine the value designation and prioritize vulnerability remediation of. By consulting the Business Impact Analysis, the team can objectively assess which system - the financial-transaction database on HQFIN01 - carries the greatest operational and financial risk, then focus remediation efforts there first.

Submitted by kwame.gh· Mar 6, 2026Vulnerability Management

Question

The most recent vulnerability scan results show the following:

The vulnerability team learned the following from the asset owners:

  • Server HQFIN01 is a financial transaction database server used in the company's largest

business unit.

  • Server HQADMIN02 is utilized by an end user with administrator privileges to several critical

applications.

  • No compensating controls exist for either issue.

Which of the following would the vulnerability team most likely do to determine remediation prioritization?

Exhibit

CS0-003 question #605 exhibit

Options

  • AReview the BCP and prioritize the remediation of the asset that would take more time to bring
  • BContact the network and desktop engineering teams to discuss prioritizing the asset that is faster
  • CReference the BIA to determine the value designation and prioritize vulnerability remediation of
  • DIdentify the network placement and configuration of each asset, then prioritize the asset with the

How the community answered

(30 responses)
  • A
    20% (6)
  • B
    10% (3)
  • C
    63% (19)
  • D
    7% (2)

Explanation

By consulting the Business Impact Analysis, the team can objectively assess which system - the financial-transaction database on HQFIN01 - carries the greatest operational and financial risk, then focus remediation efforts there first.

Topics

#vulnerability prioritization#BIA#risk assessment#remediation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice