A company is running an application on a file server. A security scan reports the application has a known vulnerability. Which of the following would be the company's BEST course of action?

The correct answer is A. Upgrade the application package. When an application has a known vulnerability, the most direct and effective remediation is to upgrade or patch the application itself, which addresses the root cause by fixing the vulnerable code. Tightening firewall rules (B) may reduce attack surface but does not eliminate…

Security and disaster recovery

Question

Options

AUpgrade the application package
BTighten the rules on the firewall
CInstall antivirus software
DPatch the server OS

How the community answered

(55 responses)

A
80% (44)
B
13% (7)
C
2% (1)
D
5% (3)

Explanation

When an application has a known vulnerability, the most direct and effective remediation is to upgrade or patch the application itself, which addresses the root cause by fixing the vulnerable code. Tightening firewall rules (B) may reduce attack surface but does not eliminate the vulnerability. Installing antivirus software (C) protects against malware but does not patch application flaws. Patching the OS (D) addresses OS-level vulnerabilities but does not fix an application-level vulnerability.

Topics

#Application security#Vulnerability management#Patching

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice