Question 1 of 30
The performance metrics show a significant increase in the number of critical vulnerabilities detected across the organization\'s network infrastructure. The CISO has directed immediate remediation of all critical vulnerabilities within 24 hours to mitigate potential risks. As a senior security analyst, which of the following approaches would be the most professionally responsible and effective in addressing this directive?
Conduct a rapid risk assessment to prioritize critical vulnerabilities based on exploitability, potential impact on business operations, and existing compensating controls, and then focus immediate remediation efforts on the highest-risk items, while scheduling lower-priority critical vulnerabilities for phased remediation.
Immediately deploy automated patching and configuration management tools to address all identified critical vulnerabilities across the entire network infrastructure without delay.
Escalate the CISO's directive to the IT operations team, requesting they halt all non-essential services and systems to dedicate all available resources to patching and remediation efforts.
Compile a report detailing the total number of critical vulnerabilities and present it to the CISO, emphasizing the technical impossibility of remediating all of them within the given timeframe due to resource constraints.

Preparing for CompTIA CySA+ Exam? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free