CA1-005: CompTIA SecurityXDemo

By CompTIA · Question Mode

QuestionQ98

Security Engineering

A company needs to manage remediation for several vulnerabilities. A security engineer evaluates how software is used within the organization and identifies the following:

Question Image

Which vulnerability should the security engineer remediate first?

  • A Buffer overflow
  • B File transfer solution data leakage
  • C Web server remote code execution
  • D CRM privilege escalation
Explanation

The externally facing file transfer solution has a high CVSS score of 8 and exposes PII. Its public accessibility increases the likelihood of exploitation, while the potential disclosure of sensitive information increases the impact.

Community Discussion

No comments yet. Be the first to start the discussion!