CySA+

A healthcare company prioritizes maintaining the confidentiality of patient data within its systems. A security analyst must prioritize vulnerabilities for remediation based on the CVSS impact metrics for the system. Which of the following vulnerabilities should be given priority for remediation?

Vulnerability CVSS Impact Metrics

1 C:L/I:H/A:H

2 C:H/I:L/A:L

3 C:N/I:H/A:N

4 C:L/I:N/A:H

• Vulnerability 1

• Vulnerability 2

• Vulnerability 3

• Vulnerability 4

A vulnerability is currently being exploited and requires no user interaction or elevated privileges. It significantly impacts integrity and availability but has no effect on confidentiality. Which of the following CVE metrics would best capture the characteristics of this vulnerability?

• CVSS:/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

• CVSS:/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
  

• CVSS:/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
  

•  CVSS:/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

A vulnerability is currently being exploited, requiring no user interaction but demanding elevated privileges. It highly impacts integrity but has no impact availability. It also has a low impact on confidentiality. Which of the following CVE metrics would best capture the characteristics of this vulnerability?

•  CVSS:/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

• CVSS:/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  

• CVSS:/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:H

• CVSS:/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A :N

  
  

A vulnerability assessment has flagged a critical vulnerability in a web server. The security analyst needs to determine if the vulnerability is a false positive. The initial investigation reveals that the conditions required for the vulnerability to be exploited are not present on the server. What should the security analyst classify this vulnerability as?

• True Positive

• False Positive

• True Negative

• False Negative

A company uses a proprietary application critical to its operations. A recent vulnerability scan shows a medium-severity vulnerability in the application. However, the application's role in business operations significantly increases its value to the company. How should the security analyst prioritize this vulnerability?

• Low priority

• Medium priority

• High priority

• Ignore the vulnerability

A security analyst is compiling a report to communicate the status of vulnerabilities discovered during the latest vulnerability scan. The report includes information about the vulnerabilities, affected hosts, and their associated risk scores. What aspect of vulnerability management reporting involves providing information about the vulnerabilities discovered, affected hosts, and their associated risk scores?

• Compliance reports

• Action plans

• Metrics and KPI's

• Vulnerability management reporting

An organization is required to adhere to certain regulatory standards and frameworks. As part of compliance efforts, the security team generates reports detailing the organization's adherence to these standards. What type of reports are generated to demonstrate adherence to regulatory standards and frameworks?

• Vulnerability management reporting

• Compliance reports

• Action plans

• Metrics and KPI's

After identifying vulnerabilities in the organization's systems, the security team develops detailed plans outlining specific actions to mitigate the identified vulnerabilities. What documents outline specific actions to address identified vulnerabilities, including configuration management, patching, and awareness training?

• Compliance reports

• Action plans

• Metrics and KPI's

• Stakeholder communication

The security team is conducting a post-incident analysis following a significant security breach. As part of the analysis, they are examining the root causes of the vulnerabilities that were exploited during the incident. What phase of vulnerability management involves analyzing the root causes of vulnerabilities that were exploited during security incidents?

• Vulnerability management reporting

• Post-incident activity

• Compliance reporting

• Action plans

The security team is developing an incident response plan that includes procedures for identifying, prioritizing, and mitigating vulnerabilities in the event of a security incident. What aspect of vulnerability management involves developing procedures for identifying, prioritizing, and mitigating vulnerabilities during security incidents?

• Preparation

• Maintenance windows

• Risk management principles

• Patching and configuration management