CV0-004 · Question #47
A list of CVEs was identified on a web server. The systems administrator decides to close the ports and disable weak TLS ciphers. Which of the following describes this vulnerability management stage?
The correct answer is D. Remediation. The vulnerability management lifecycle typically follows these stages: Identification (discovering vulnerabilities), Scanning (using tools to detect them), Assessment (evaluating severity and risk), and Remediation (fixing the vulnerabilities). In this scenario, CVEs have…
Question
A list of CVEs was identified on a web server. The systems administrator decides to close the ports and disable weak TLS ciphers. Which of the following describes this vulnerability management stage?
Options
- AScanning
- BIdentification
- CAssessment
- DRemediation
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C8% (2)
- D77% (20)
Explanation
The vulnerability management lifecycle typically follows these stages: Identification (discovering vulnerabilities), Scanning (using tools to detect them), Assessment (evaluating severity and risk), and Remediation (fixing the vulnerabilities). In this scenario, CVEs have already been identified and assessed - the administrator is now taking corrective action by closing unnecessary ports and hardening the TLS configuration. These are active fixes that reduce the attack surface, which is precisely what the Remediation stage entails. No new scanning or identification is occurring; the admin is resolving already-known issues.
Topics
Community Discussion
No community discussion yet for this question.