nerdexam
CompTIA

CS0-003 · Question #640

A security analyst receives the following information about the company's systems. They need to prioritize which systems should be given the resources to improve security. Which of the following…

The correct answer is B. Server1. Windows Server 2008 R2 is long past end-of-life, meaning it no longer receives security patches. An unpatched, unsupported operating system represents a critical risk and should be remediated before any other system.

Submitted by dimitri_ru· Mar 6, 2026Vulnerability Management

Question

A security analyst receives the following information about the company's systems. They need to prioritize which systems should be given the resources to improve security. Which of the following systems should the analyst remediate first?

Exhibit

CS0-003 question #640 exhibit

Options

  • AComputer1
  • BServer1
  • CComputer2
  • DServer2

How the community answered

(51 responses)
  • A
    10% (5)
  • B
    84% (43)
  • C
    4% (2)
  • D
    2% (1)

Explanation

Windows Server 2008 R2 is long past end-of-life, meaning it no longer receives security patches. An unpatched, unsupported operating system represents a critical risk and should be remediated before any other system.

Topics

#vulnerability prioritization#risk assessment#remediation planning

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice