100-160 Question 194
Select 3You are a cybersecurity technician at a mid-sized company. During a routine vulnerability assessment, you discover that a critical vulnerability listed in a Common Vulnerabilities and Exposures (CVE) database is present in your network. However, after running your vulnerability scanning tool, the report shows no active exploitation of the vulnerability in your systems. What should be your next steps to address this situation?
- A
Immediately patch the affected systems to mitigate the vulnerability.
- B
Ignore the vulnerability since it is not actively exploited in your network.
- C
Consult the CVE details and industry-standard threat intelligence to assess the urgency and potential impact.
- D
Document the vulnerability, actions taken, and rationale for future reference.
- E
Wait for a cybersecurity incident to occur before taking any action.
Show answer and explanation
Correct answers: A, C, D
Explanation
Addressing vulnerabilities proactively is a key aspect of cybersecurity. Even if a vulnerability is not being actively exploited, patching it reduces the risk of future exploitation. Using CVE databases and threat intelligence tools helps in understanding the severity and prioritizing actions. Documentation is crucial for maintaining a clear record of actions taken and complying with best practices.
- A. Correct.
Immediately patching the affected systems is a proactive step to mitigate the risk of exploitation, even if the vulnerability is not actively exploited yet.
- B. Incorrect.
Ignoring the vulnerability is not a best practice, as it leaves the network open to potential exploitation in the future.
- C. Correct.
Consulting the CVE details and threat intelligence helps prioritize and understand the severity, allowing you to make informed decisions about mitigation steps.
- D. Correct.
Documenting the vulnerability and actions taken ensures traceability, compliance, and preparedness for future audits or incidents.
- E. Incorrect.
Waiting for an incident before acting is a reactive approach and could lead to significant damage or data loss.