CompTIA CySA+ CS0-003 Practice Question
You are responsible for vulnerability management in your organization. After conducting a vulnerability scan, you identify a high-risk vulnerability in a legacy system. What is the most appropriate next step to include in your vulnerability management report?
Note in the report that the legacy system does not need immediate attention due to its isolated network.
Document that the legacy system should be replaced to address the vulnerability.
Recommend postponing any action until the next scheduled system upgrade.
Include a prioritized action plan for remediation focusing on mitigating the high-risk vulnerability.