CompTIA CySA+ CS0-003 Practice Question
During a routine vulnerability assessment, a security analyst identifies a critical flaw in a web application server that currently supports high-traffic e-commerce operations. The recommended patch could potentially impact the performance of the application during peak hours. In preparing a vulnerability management report, what information should the analyst prioritize to ensure stakeholders understand the risk without unnecessarily alarming them about potential performance degradation?
Recommend immediate implementation of the patch to avert any potential exploit
Prioritize detailed risk scores and potential impact to guide decision-making
Focus primarily on the recurrence risk of the same vulnerability in the future
Advocate for risk acceptance due to the potential for performance degradation