CompTIA CySA+ CS0-003 Practice Question

A compensating control for mitigating the risk posed by an unpatchable legacy system should involve measures that provide security equivalent to the original fix. Implementing a firewall rule to block specific attack vectors helps limit exposure to vulnerabilities while a more permanent solution is being developed. Although routine vulnerability scanning is important, it does not directly mitigate the specific identified vulnerability. Disabling unused services improves security but may not address the specific vulnerability. Increasing logging and monitoring is valuable but is more of a detective control rather than a preventive one.