CompTIA CySA+ CS0-003 Practice Question

Your organization has identified a security vulnerability in an internally developed application. After performing a risk assessment, it is determined that the cost of remediation exceeds the potential impact of the vulnerability being exploited. Additionally, there is no immediate threat or known exploit for this vulnerability. What is the MOST appropriate risk management response in this scenario?

  • Formally accept the risk and monitor for changes in the threat landscape.

  • Patch the vulnerability immediately regardless of the remediation costs.

  • Transfer the risk by outsourcing the application component to a third-party vendor.

  • Schedule the patch to be included in the next release cycle without additional review.

CompTIA CySA+ CS0-003
Vulnerability Management
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot