100-160 Question 174
Single answerA company recently conducted a vulnerability assessment and discovered a critical vulnerability in its web application that could allow unauthorized users to access sensitive data. As the company's cybersecurity technician, what is the most appropriate next step to address this vulnerability?
- A
Apply the latest security patch provided by the web application vendor.
- B
Deactivate the web application temporarily until a new version is developed.
- C
Update the company's firewall rules to block all traffic to the web application.
- D
Ignore the vulnerability since no exploit attempts have been detected yet.
Show answer and explanation
Correct answer: A
Explanation
When a critical vulnerability is identified, the most effective and practical response is to apply the latest security patch provided by the vendor. This addresses the root cause of the vulnerability and ensures the system is protected without significantly disrupting business operations. Neglecting or delaying remediation increases the risk of exploitation and potential data breaches.
- A. Correct.
Applying the latest security patch provided by the vendor is the correct action to remediate the vulnerability effectively and prevent exploitation.
- B. Incorrect.
Deactivating the web application temporarily is not a practical long-term solution and may disrupt business operations unnecessarily.
- C. Incorrect.
Updating the firewall rules to block all traffic to the web application is overly restrictive and could impact legitimate users, which is not ideal for addressing the vulnerability.
- D. Incorrect.
Ignoring the vulnerability because no exploit attempts have been detected is highly irresponsible and could lead to a security breach if the vulnerability is exploited in the future.