350-201 Question 225
Select 3A financial company has recently conducted a vulnerability scan and discovered several critical vulnerabilities in its web application servers. As a cybersecurity expert, what general mitigation steps should you recommend to address these vulnerabilities effectively?
- A
Apply security patches or updates to affected systems promptly.
- B
Conduct regular penetration testing to identify new vulnerabilities.
- C
Disable all unused services and unnecessary open ports on the servers.
- D
Implement network segmentation to isolate vulnerable systems.
- E
Ignore low-severity vulnerabilities as they are not a priority.
Show answer and explanation
Correct answers: A, C, D
Explanation
Mitigating vulnerabilities effectively involves multiple steps that reduce the attack surface, address the root cause of the issues, and limit the potential impact of exploitation. Applying patches, reducing unnecessary services, and implementing segmentation are fundamental mitigation techniques. Regular penetration testing and ignoring low-severity vulnerabilities are not immediate mitigation steps but rather part of broader security practices.
- A. Correct.
Applying security patches or updates is a fundamental step in mitigating vulnerabilities, as it directly addresses the flaws identified in the systems.
- B. Incorrect.
While penetration testing is a proactive measure to find vulnerabilities, it is not a direct mitigation step for already identified vulnerabilities.
- C. Correct.
Disabling unused services and unnecessary open ports reduces the attack surface and is a key step to mitigate vulnerabilities.
- D. Correct.
Network segmentation helps limit the potential impact of compromised systems by isolating them from other critical systems.
- E. Incorrect.
Ignoring low-severity vulnerabilities is not recommended, as they can still be exploited in specific scenarios or chained with other vulnerabilities.