100-160 Question 149
Select 3A company has recently experienced a data breach due to an exploit targeting an unpatched vulnerability in a widely used application. As a cybersecurity technician, you are tasked with ensuring that all systems are secured. Which actions should you take to address this issue and prevent similar incidents in the future?
- A
Regularly apply Windows Updates to ensure the operating system is up to date.
- B
Enable automatic updates for critical applications and periodically check for updates manually.
- C
Disable all firmware updates, as they are rarely necessary for cybersecurity purposes.
- D
Regularly monitor vendor announcements for security patches and apply them promptly.
- E
Rely solely on antivirus software to detect and mitigate vulnerabilities.
Show answer and explanation
Correct answers: A, B, D
Explanation
To prevent exploits, it is critical to maintain a proactive approach to patch management by updating operating systems, applications, and firmware. Monitoring vendor announcements ensures timely application of patches, while relying solely on antivirus software or ignoring firmware updates leaves systems vulnerable. The selected actions collectively address the root cause of the issue and mitigate future risks.
- A. Correct.
Keeping the operating system up to date with Windows Updates ensures that known vulnerabilities in the OS are patched, reducing the attack surface.
- B. Correct.
Enabling automatic updates for applications helps ensure that critical fixes are applied without delay, and manual checks provide an extra layer of assurance.
- C. Incorrect.
Disabling firmware updates is not recommended, as firmware updates often include important security fixes for hardware vulnerabilities.
- D. Correct.
Monitoring vendor announcements ensures you're aware of new patches or vulnerabilities, allowing for quick mitigation.
- E. Incorrect.
While antivirus software is important, it cannot replace the need for applying patches and updates to prevent exploitation of vulnerabilities.