100-160 Question 204
Single answerA cybersecurity analyst discovers that a web application used by the organization has a vulnerability that could allow attackers to execute malicious code. However, the application is hosted on an isolated server with no direct internet access. How should the analyst classify the risk level and determine the best approach to mitigate it?
- A
Classify the risk as Extremely High and immediately shut down the server.
- B
Classify the risk as Low and track it for potential changes in the environment.
- C
Classify the risk as Medium and apply patches or configurations to mitigate the vulnerability.
- D
Classify the risk as High and implement additional network monitoring for the server.
Show answer and explanation
Correct answer: C
Explanation
The vulnerability presents a potential risk that is currently mitigated by the server's isolated environment, which reduces the immediate threat exposure. However, vulnerabilities that allow code execution should still be addressed to avoid future escalation if the environment changes. Classifying the risk as Medium and applying patches or configuration changes is a proactive risk management strategy that balances mitigation efforts with the current level of exposure.
- A. Incorrect.
Classifying the risk as Extremely High and shutting down the server is not appropriate because the threat exposure is limited due to the server's isolation. This would also unnecessarily impact business operations.
- B. Incorrect.
Classifying the risk as Low is incorrect because vulnerabilities that allow code execution can have serious consequences if exposure changes, even if current risk is minimized by isolation.
- C. Correct.
Classifying the risk as Medium and applying patches or configurations is the correct answer because the vulnerability exists and could escalate if the environment changes. Mitigating it proactively is a balanced approach.
- D. Incorrect.
Classifying the risk as High and implementing additional monitoring is not the best approach in this scenario since the server is isolated and the risk level does not warrant such a classification.