Which of the following practices is used to mitigate a known security vulnerability?

The correct answer is B. Patch management. Patch management is the systematic process of identifying, acquiring, testing, and deploying software updates (patches) released by vendors to fix known security vulnerabilities. When a CVE is published and a patch is available, applying it directly mitigates the known…

Threats, vulnerabilities, and mitigations

Question

Options

AApplication fuzzing
BPatch management
CPassword cracking
DAuditing security logs

How the community answered

(20 responses)

B
90% (18)
C
5% (1)
D
5% (1)

Explanation

Patch management is the systematic process of identifying, acquiring, testing, and deploying software updates (patches) released by vendors to fix known security vulnerabilities. When a CVE is published and a patch is available, applying it directly mitigates the known vulnerability. Option A (application fuzzing) is used to discover unknown vulnerabilities by sending unexpected inputs - it is a testing technique, not a mitigation. Option C (password cracking) is an offensive technique used in penetration testing. Option D (auditing security logs) is a detective control that identifies incidents after the fact but does not mitigate the underlying vulnerability.

Topics

#patch management#vulnerability mitigation#known vulnerabilities

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice