CAS-005: CompTIA SecurityX

By CompTIA · Question Mode

QuestionQ51

Security Operations

A web application server is running a legacy operating system with an unpatched RCE vulnerability. The server cannot be upgraded until the corresponding application code is changed. Which of the following compensating controls would best prevent successful exploitation?

Explanation

Segmentation isolates the unpatchable legacy host in its own restricted network zone, sharply limiting which systems and users can reach it and reducing the practical attack surface until the application code can be rewritten to allow patching. It is the classic compensating control used when the primary control, remediating the vulnerability itself, cannot be applied.

Community Discussion

No comments yet. Be the first to start the discussion!