CS0-004: CompTIA Cybersecurity Analyst (CySA+)Demo

By CompTIA · Question Mode

QuestionQ71

Vulnerability Management

A systems administrator is reviewing vulnerability scan output for the organization.

Based on the organization's environment architecture and remediation standards, identify the server that must be patched within 14 calendar days, and select the appropriate remediation technique and mitigation for that finding.

Question Image

Question Image

Question Image

Select
Select the server to be patched within 14 calendar days:
Select the appropriate technique and mitigation:
Explanation

Per the remediation standard, findings with CVSS greater than 7.9 and less than 9.0 must be patched and verified within 14 calendar days, and this timeframe applies only to the OPS environment (the table shows checkmarks for OPS but X for TEST and STAGE for that CVSS band). The environment tab maps ops.comptia.org to subnets including 192.168.60.0/24. Among the scan findings, the TLS downgrade vulnerability (CVSS 8.1) affects host 192.168.60.90, which resides in the ops.comptia.org 192.168.60.0/24 subnet, making it the asset subject to the 14-day requirement. Although the untrusted X.509 certificate finding also has CVSS 8.1, its affected host 192.168.51.32 belongs to the test.comptia.org subnet, where the 14-day standard does not apply. For the TLS downgrade weakness — where the server allows the client to negotiate weaker protocol/cipher options — the appropriate remediation is to reconfigure the server to support only modern, strong cipher suites (disabling legacy/export-grade ciphers), which directly closes the downgrade attack vector rather than requiring a compensating control or an exception.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!