Which of the following is the best mitigation for a zero-day vulnerability found in mission-critical production servers that must be highly available?

The correct answer is C. Monitoring and implementing compensating controls. With no patch available for a zero-day, deploying compensating controls, such as enhanced monitoring, intrusion prevention, and strict access restrictions, reduces risk while keeping critical

Submitted by andreas_gr· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

Options

AVirtualizing and migrating to a containerized instance
BRemoving and sandboxing to an isolated network
CMonitoring and implementing compensating controls
DPatching and redeploying to production as quickly as possible

How the community answered

(46 responses)

A
9% (4)
B
26% (12)
C
46% (21)
D
20% (9)

Explanation

With no patch available for a zero-day, deploying compensating controls, such as enhanced monitoring, intrusion prevention, and strict access restrictions, reduces risk while keeping critical

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice