Exam CS0-003 topic 1 question 133 discussion

Actual exam question from CompTIA's CS0-003

Question #: 133
Topic #: 1

The security analyst received the monthly vulnerability report. The following findings were included in the report:

• Five of the systems only required a reboot to finalize the patch application
• Two of the servers are running outdated operating systems and cannot be patched

The analyst determines that the only way to ensure these servers cannot be compromised is to isolate them. Which of the following approaches will best minimize the risk of the outdated servers being compromised?

A. Compensating controls
B. Due diligence
C. Maintenance windows
D. Passive discovery

Show Suggested Answer

Suggested Answer: A 🗳️

by chaddman at Oct. 30, 2023, 6:10 p.m.

Comments

Submit Cancel

FT000

11 months ago

Selected Answer: A

Basically, it will be network segmented. This is a compensatory control.

upvoted 4 times

...

chaddman

1 year, 2 months ago

Selected Answer: A

Compensating Controls (A): Since the servers are running outdated operating systems and cannot be patched, compensating controls like network segmentation, firewalls, and intrusion detection/prevention systems can be implemented to isolate these servers and minimize the risk of compromise.

upvoted 3 times

...

chaddman

1 year, 2 months ago

upvoted 1 times

...