100-160 Question 189
Single answerYou are a junior cybersecurity technician tasked with identifying potential vulnerabilities in your organization's network. Using threat intelligence techniques, you discover that one of your servers is running an outdated version of a web application that has been flagged in a recent threat report. What should you do next to address this vulnerability?
- A
Immediately disconnect the server from the network to prevent potential exploitation.
- B
Cross-reference the threat report with vulnerability databases to confirm the issue and assess its severity.
- C
Wait for the next scheduled network audit to address the vulnerability.
- D
Install any available updates for the web application without further investigation.
Show answer and explanation
Correct answer: B
Explanation
Using threat intelligence techniques involves validating the identified vulnerabilities by cross-referencing with reliable sources like vulnerability databases (e.g., CVE). This ensures that the threat is real and allows you to prioritize and mitigate it effectively based on its severity. Acting without confirmation or delaying action could lead to unnecessary disruptions or increased security risks.
- A. Incorrect.
Immediately disconnecting the server may unnecessarily disrupt business operations without confirming the severity of the issue.
- B. Correct.
Cross-referencing the threat report with vulnerability databases is an essential step to confirm the validity of the threat and assess its potential impact on the network.
- C. Incorrect.
Waiting for the next scheduled audit delays the response to a potentially critical vulnerability, increasing the risk of exploitation.
- D. Incorrect.
Installing updates without proper investigation may introduce compatibility issues or fail to address the root cause of the problem.