100-160 Question 195
Select 3A cybersecurity analyst at your organization has reported a recent vulnerability identified in a widely used software application. You have been tasked with assessing the issue. Which actions should you take to effectively address the vulnerability and minimize its impact?
- A
Consult a vulnerability database such as the NVD (National Vulnerability Database) to gather detailed information about the CVE associated with the vulnerability.
- B
Rely solely on automated threat intelligence tools to generate a report without any manual review or validation.
- C
Subscribe to cybersecurity news and threat intelligence feeds to stay updated on remediation recommendations and exploit activity related to the vulnerability.
- D
Update internal documentation with details of the vulnerability, its impact, and remediation steps, and share it securely with relevant stakeholders.
- E
Wait for the vendor to release a patch before taking any other action to address the vulnerability.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effectively addressing a vulnerability requires leveraging multiple resources and actions. Using vulnerability databases provides detailed and standardized information about the CVE, while cybersecurity news and threat intelligence help stay informed about the latest developments and mitigation strategies. Updating and securely sharing documentation ensures that the organization is aligned on the vulnerability's impact and response plan. Waiting passively for a vendor's patch or relying solely on automated tools is insufficient for comprehensive risk management.
- A. Correct.
Consulting a vulnerability database like the NVD is essential for obtaining CVE information, severity scores, and remediation guidance. This step provides a foundational understanding of the vulnerability.
- B. Incorrect.
While automated threat intelligence tools are useful, relying solely on them without manual review or validation can lead to incomplete or inaccurate reports.
- C. Correct.
Cybersecurity news and threat intelligence feeds offer real-time insights into exploit activity and best practices for addressing vulnerabilities. Subscribing to these services enhances proactive defense measures.
- D. Correct.
Updating internal documentation ensures that all stakeholders have access to accurate and current information about the vulnerability, its potential impact, and the remediation process. Secure sharing prevents unauthorized access to sensitive information.
- E. Incorrect.
Waiting for the vendor to release a patch without taking interim measures (e.g., mitigating actions, monitoring, or isolating affected systems) increases the risk of exploitation.