Crucial Exams

CompTIA CySA+ CS0-003 (V3) Practice Question

A cybersecurity analyst is preparing a vulnerability management report and identifies a high-risk vulnerability on a system that is tightly governed by the organization's change management policies. The policy requires a two-week review period for any system changes, but the vendor has rated the vulnerability as 'critical' with a high likelihood of exploitation. In light of the existing organizational governance, which course of action should the analyst recommend in the vulnerability management report to address the risk adequately?

  • Advise immediate patch deployment to override the two-week review policy due to the vendor's critical rating.

  • Suggest waiting for the two-week review period before any action, adhering to the strict change management policy.

  • Recommend implementing compensating controls and initiating an expedited review process for the patch deployment.

  • Propose the creation of an exception in the governance policy for all vendor-rated critical vulnerabilities going forward.

CompTIA CySA+ CS0-003 (V3)
Reporting and Communication
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
SAVE $51
CompTIA Cybersecurity Analyst Voucher
CySA+ / v3 / CS0-003
$425.00 $374.00
SAVE $57
CompTIA Cybersecurity Analyst Voucher with Retake
CySA+ / v3 / CS0-003
Includes Retake
$474.00 $417.00
Bash, the Crucial Exams Chat Bot
AI Bot