Question 1 of 30
Operational review demonstrates that the IT security team has identified a critical vulnerability affecting a widely used enterprise application. The vulnerability has a high CVSS score and is actively being exploited in the wild. The application is integral to several core business processes, including customer order processing and financial reporting. The team is considering several approaches to address this vulnerability. Which of the following approaches represents the most professional and effective method for managing this threat?
Conduct a thorough risk assessment to determine the specific impact on critical business functions, prioritize patching based on this assessment and the exploitability, and develop a phased deployment plan in coordination with IT operations and business stakeholders.
Immediately deploy the patch to all affected systems without delay to eliminate the risk as quickly as possible, accepting any potential operational disruptions as a necessary consequence.
Prioritize patching solely based on the CVSS score, ensuring that systems with the highest scores are patched first, irrespective of their role in business operations.
Defer all patching activities for this vulnerability until the next scheduled quarterly maintenance window to minimize disruption to ongoing operations.

Preparing for CompTIA CySA+ Exam? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free