100-160 Question 191
Select 3A cybersecurity analyst discovers a new vulnerability in a company’s web application. To address the issue effectively, which actions should the analyst prioritize to ensure the vulnerability is managed properly while maintaining accurate documentation and communication?
- A
Check the vulnerability against a trusted vulnerability database, such as the NVD, to identify its CVE ID and severity.
- B
Rely solely on cybersecurity news websites to gather information about the vulnerability.
- C
Document the vulnerability details, mitigation steps, and resolution in the organization’s incident response system.
- D
Set up automated alerts for any updates regarding the vulnerability from threat intelligence platforms.
- E
Share vulnerability details publicly on social media to gather external feedback before mitigation.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effectively managing a vulnerability requires leveraging trusted resources like vulnerability databases and threat intelligence platforms to assess the issue and monitor updates. Additionally, documenting the process is crucial for accountability and future reference. Publicly sharing sensitive information is a poor practice that could lead to further security risks.
- A. Correct.
Trusted vulnerability databases, like the National Vulnerability Database (NVD), provide detailed information about vulnerabilities, including CVE IDs, severity ratings, and mitigation recommendations. This is a key step for proper vulnerability management.
- B. Incorrect.
While cybersecurity news websites can provide general updates, they are not a reliable or comprehensive source for managing vulnerabilities. Analysts should rely on industry-standard tools and databases.
- C. Correct.
Documenting the vulnerability, mitigation steps, and resolution ensures that the organization has a clear record for auditing, learning, and compliance purposes. This is a critical best practice in cybersecurity.
- D. Correct.
Setting up automated alerts from threat intelligence platforms ensures the analyst can stay up-to-date on any changes or updates to the vulnerability, assisting in timely responses.
- E. Incorrect.
Sharing vulnerability details publicly on social media is not a secure or professional practice. This could expose sensitive information and make the organization more vulnerable to attacks.