350-201 Question 227
Select 4A network administrator discovers that a critical server in the organization's infrastructure is running outdated software with known vulnerabilities. Which general mitigation steps should the administrator recommend to address this issue effectively?
- A
Apply the latest security patches and updates to the vulnerable software immediately.
- B
Isolate the server from the network until the vulnerabilities are addressed.
- C
Ignore the vulnerability since it has not yet been exploited.
- D
Conduct a vulnerability assessment to understand the full impact and risk.
- E
Implement compensating controls, such as a web application firewall (WAF), to mitigate potential exploitation.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To address vulnerability issues effectively, a combination of patching, isolation, assessment, and compensating controls is recommended. These steps ensure that the vulnerability is mitigated in both the short and long term, reducing the risk of exploitation while maintaining system functionality. Ignoring the issue is never an acceptable strategy as it leaves the infrastructure exposed.
- A. Correct.
Applying the latest security patches and updates is a critical step in mitigating vulnerabilities as it directly addresses the root cause of the issue.
- B. Correct.
Isolating the server from the network can prevent potential exploits while the vulnerabilities are being addressed, reducing the attack surface.
- C. Incorrect.
Ignoring the vulnerability is not a recommended approach as it leaves the system exposed to potential exploitation.
- D. Correct.
Conducting a vulnerability assessment helps in understanding the scope of the issue, the risk involved, and the priority of remediation.
- E. Correct.
Implementing compensating controls, such as a WAF, provides immediate protection against exploitation while a long-term fix is being implemented.