100-160 Question 193
Select 3You are a cybersecurity technician tasked with addressing a recent vulnerability identified in your organization's web server. To ensure the vulnerability is properly assessed and mitigated, you decide to consult resources like Common Vulnerabilities and Exposures (CVEs) and other threat intelligence sources. Which actions should you take to effectively address the issue and maintain proper documentation?
- A
Search the CVE database for detailed information about the vulnerability and its severity.
- B
Use an industry-standard vulnerability assessment tool to confirm the presence of the vulnerability and evaluate its impact.
- C
Notify stakeholders only after resolving the issue to avoid unnecessary panic.
- D
Update documentation with the steps taken to mitigate the vulnerability and share it with relevant teams.
- E
Rely solely on automated threat intelligence tools to monitor and remediate the vulnerability.
Show answer and explanation
Correct answers: A, B, D
Explanation
To effectively address vulnerabilities, technicians must gather accurate information from sources like CVEs, confirm the issue using industry-standard tools, and maintain clear and updated documentation. Proactive communication with stakeholders and combining automated tools with manual analysis ensures a thorough and coordinated response.
- A. Correct.
Correct: The CVE database is a reliable source for identifying vulnerabilities and understanding their details, including severity, which is critical for prioritization.
- B. Correct.
Correct: Industry-standard tools can validate the presence of the vulnerability and provide insights into its potential impact on the system.
- C. Incorrect.
Incorrect: Stakeholders should be informed proactively during the process to ensure proper coordination and transparency, rather than waiting until the issue is fully resolved.
- D. Correct.
Correct: Properly documenting and sharing mitigation steps ensures all relevant parties are aligned and can improve response efforts in the future.
- E. Incorrect.
Incorrect: While automated tools are helpful, relying solely on them is insufficient as manual analysis and other resources (e.g., CVEs) are also necessary for comprehensive threat assessment and mitigation.