Exam CS0-003 topic 1 question 103 discussion

Actual exam question from CompTIA's CS0-003

Question #: 103
Topic #: 1

An end-of-life date was announced for a widely used OS. A business-critical function is performed by some machinery that is controlled by a PC, which is utilizing the OS that is approaching the end-of-life date. Which of the following best describes a security analyst’s concern?

A. Any discovered vulnerabilities will not be remediated.
B. An outage of machinery would cost the organization money.
C. Support will not be available for the critical machinery.
D. There are no compensating controls in place for the OS.

Show Suggested Answer

Suggested Answer: A 🗳️

by kmordalv at Aug. 30, 2023, 3:03 p.m.

Comments

Submit Cancel

glenndexter

Highly Voted 8 months, 2 weeks ago

The best description of a security analyst's concern in this scenario is: A. Any discovered vulnerabilities will not be remediated. As an operating system reaches its end-of-life date, the vendor typically stops providing security updates and patches for known vulnerabilities. This leaves systems running on the outdated OS exposed to potential security risks. Without the ability to receive patches, any vulnerabilities discovered in the OS after the end-of-life date will remain unaddressed, increasing the risk of exploitation by malicious actors. This concern highlights the importance of migrating critical systems to supported and up-to-date platforms to mitigate security risks. While options B, C, and D may also be concerns for the organization, the primary focus of a security analyst is typically on mitigating security risks, making option A the best choice.

upvoted 5 times

...

leesuh

Most Recent 4 months ago

Selected Answer: C

Why is C not an option?

upvoted 1 times

Susan4041

3 months, 2 weeks ago

Although the lack of support could be an issue (for instance, in troubleshooting), the main concern is the lack of security updates rather than general support. Critical systems will still continue to function, but they will be at risk from unpatched vulnerabilities.

upvoted 1 times

...

Rezaee

11 months, 4 weeks ago

Selected Answer: A

A. Any discovered vulnerabilities will not be remediated.

upvoted 3 times

...

kmordalv

1 year, 4 months ago

Selected Answer: A

Correct As the OS that controls the business-critical machinery is approaching its end-of-life date, it means that the OS will no longer receive updates and security patches from the vendor. This leaves the OS and the machinery susceptible to potential security breaches and attacks that could exploit these unpatched vulnerabilities.

upvoted 2 times

...