CompTIA CySA+ CS0-003 Practice Question
As a cybersecurity analyst, you have discovered a zero-day vulnerability in a widely used enterprise application. What is the most appropriate initial action to take in terms of vulnerability management reporting?
Assess the risk score of the vulnerability and start working on the development of a patch before reporting.
Document the vulnerability and send out a general email to all employees to ensure they are aware.
Initiate an incident report to document the vulnerability and start the communication process with relevant stakeholders.
Focus on monitoring network traffic for any signs of exploitation before reporting to avoid unnecessary alarm.