nerdexam
CompTIA

CS0-003 · Question #93

After detecting possible malicious external scanning, an internal vulnerability scan was performed, and a critical server was found with an outdated version of JBoss. A legacy application that is runn

The correct answer is C. Create a proper DMZ for outdated components and segregate the JBoss server.. The DMZ is a special network zone designed to house systems that receive connections from the outside world, such as web and email servers. Sound firewall designs place these systems on an isolated network where, if they become compromised, they pose little threat to the internal

Submitted by eva_at· Mar 6, 2026Vulnerability Management

Question

After detecting possible malicious external scanning, an internal vulnerability scan was performed, and a critical server was found with an outdated version of JBoss. A legacy application that is running depends on that version of JBoss. Which of the following actions should be taken FIRST to prevent server compromise and business disruption at the same time?

Options

  • AMake a backup of the server and update the JBoss server that is running on it.
  • BContact the vendor for the legacy application and request an updated version.
  • CCreate a proper DMZ for outdated components and segregate the JBoss server.
  • DApply visualization over the server, using the new platform to provide the JBoss service for the

How the community answered

(60 responses)
  • A
    12% (7)
  • B
    3% (2)
  • C
    78% (47)
  • D
    7% (4)

Explanation

The DMZ is a special network zone designed to house systems that receive connections from the outside world, such as web and email servers. Sound firewall designs place these systems on an isolated network where, if they become compromised, they pose little threat to the internal network because connections between the DMZ and the internal network must still pass through the firewall and are subject to its security policy.

Topics

#Vulnerability remediation#Network segmentation#Legacy systems#DMZ

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice