100-160 Question 172
Single answerDuring a routine vulnerability assessment of your organization's network, you discover that a critical server is running outdated software with known vulnerabilities. What should you do first to address this issue?
- A
Immediately shut down the server to prevent exploitation.
- B
Document the vulnerability and prioritize it based on risk to the organization.
- C
Update the software immediately without consulting other teams.
- D
Ignore the vulnerability if there is no evidence of active exploitation.
Show answer and explanation
Correct answer: B
Explanation
The first step in addressing a vulnerability is to document it and assess its risk to the organization. This allows you to prioritize remediation efforts and coordinate with other teams as needed. Acting hastily or ignoring the issue could have negative impacts on security or business operations.
- A. Incorrect.
Shutting down the server without proper planning can disrupt business operations. While protecting the system is important, you need to assess the risk and plan remediation properly.
- B. Correct.
Documenting the vulnerability and prioritizing it based on risk is the correct first step. This ensures a structured response and allows you to address the most critical vulnerabilities effectively.
- C. Incorrect.
Updating the software immediately without consulting other teams could lead to unintended consequences, such as compatibility issues or system downtime. A coordinated approach is better.
- D. Incorrect.
Ignoring the vulnerability is not acceptable because known vulnerabilities can still be exploited at any time, even if there is no evidence of active exploitation yet.