CompTIA CySA+ CS0-003 Practice Question

The correct answer is to 'Notify the incident response team.' This ensures that the necessary personnel are aware of the critical vulnerability and can begin to take appropriate actions to mitigate the risk. While performing other tasks like disabling the payment system or applying patches may be necessary, they should not be done without coordination with the incident response team to avoid unplanned consequences that can impact business operations or introduce further vulnerabilities.