Question 1 of 30
Risk assessment procedures indicate a critical vulnerability has been discovered in a production web server that could lead to a complete system compromise. The vulnerability requires immediate patching, but the standard change management process typically takes 48-72 hours for approval and implementation. As the security analyst who discovered this, what is the most appropriate immediate course of action?
Immediately escalate the vulnerability to the incident response team and CISO, and initiate the documented emergency change request process for expedited patching.
Proceed with patching the server immediately to mitigate the risk, without waiting for any formal approval or notification.
Continue with the standard 48-72 hour change management process to ensure all documentation and approvals are in place before any remediation.
Attempt to remediate the vulnerability discreetly by applying the patch without informing management or the incident response team.

Preparing for CompTIA CySA+ Exam? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free