اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 734 من 1040

كل الأسئلة

During an internal code review, software called 'ACE' was discovered to have a vulnerability that allows the execution of arbitrary code. The vulnerability is in a legacy, third-party vendor resource that is used by the ACE software. ACE is used worldwide and is essential for many businesses in this industry. Developers informed the Chief Information Security Officer that removal of the vulnerability will take time. Which of the following is the first action to take?

الخيارات

  • A Look for potential IoCs in the company.
  • B Inform customers of the vulnerability.
  • C Remove the affected vendor resource from the ACE software.
  • D Develop a compensating control until the issue can be fixed permanently.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.