100-160 Question 176
Single answerA company has recently implemented a vulnerability management program. During the first scanning cycle, the cybersecurity team identifies a critical vulnerability in a production server that is actively being exploited. What should the team do next as part of the vulnerability management process?
- A
Immediately isolate the affected server from the network to prevent further exploitation.
- B
Document the vulnerability and schedule it for remediation during the next quarterly update cycle.
- C
Apply a temporary mitigation, such as a firewall rule or configuration change, to reduce the risk until a patch can be applied.
- D
Ignore the vulnerability because it is in a production server, and taking action could disrupt business operations.
Show answer and explanation
Correct answer: C
Explanation
Vulnerability management involves identifying, assessing, and prioritizing vulnerabilities to minimize security risks. When a critical vulnerability is actively exploited, an immediate response is necessary to mitigate the risk. Applying a temporary mitigation, such as a firewall rule or configuration change, is a practical solution that addresses the issue while maintaining business operations until a permanent fix (e.g., patch) can be applied.
- A. Incorrect.
Isolating the server might immediately stop exploitation but could disrupt critical business operations. This action should only be taken if absolutely necessary and other mitigations are unavailable.
- B. Incorrect.
Delaying remediation of a critical vulnerability that is actively exploited is not advisable, as it leaves the system exposed to further attacks.
- C. Correct.
Applying a temporary mitigation, such as a firewall rule or configuration change, is the best approach in this scenario. It reduces the risk while maintaining business continuity until a permanent fix can be applied.
- D. Incorrect.
Ignoring the vulnerability is not an acceptable action in a vulnerability management process, especially when the vulnerability is actively being exploited.