⚡️Lightning Sale: 50% off lifetime membership! ⚡️

1 hour, 30 minutes remaining!
CompTIA Study Materials
AWS Study Materials
AWS Cloud Practitioner AWS Cloud Practitioner
AWS Cloud Practitioner CLF-C02
Microsoft Study Materials
Microsoft Azure Fundamentals Microsoft Azure Fundamentals
Microsoft Azure Fundamentals AZ-900

Free CompTIA CySA+ CS0-003 Practice Question

As a Security Analyst for a large organization, you have identified a low severity vulnerability on a server hosting a non-essential marketing website. The server is isolated from the internal network and contains no sensitive data. The vulnerability does not have a known exploit and fixing it would require taking the server offline during a major marketing campaign. What is the MOST appropriate risk management action to take in this scenario?

  • Ignore the vulnerability since it has no known exploit and is not critical.

  • Document the vulnerability and accept the risk until the campaign is over.

  • Immediately patch the vulnerability causing downtime during the marketing campaign.

  • Decommission the server as no vulnerability should be left unaddressed.

Subscribe to avoid duplicate questions and track your progress over time

Your Score:
Vulnerability Management
Security Operations
Incident Response and Management
Reporting and Communication
CompTIA CySA+ CS0-003
  • Security Operations
  • Vulnerability Management
    • This question is filed here
  • Incident Response and Management
  • Reporting and Communication