An Engineer Is Going Through Vulnerability Triage with Company Management

question 67

Multiple Choice

An engineer is going through vulnerability triage with company management because of a recent malware outbreak from which 21 affected assets need to be patched or remediated. Management decides not to prioritize fixing the assets and accepts the vulnerabilities. What is the next step the engineer should take?

• A) Investigate the vulnerability to prevent further spread
• B) Acknowledge the vulnerabilities and document the risk
• C) Apply vendor patches or available hot fixes
• D) Isolate the assets affected in a separate network

---

Definitions:

Sunk Cost

Costs that have already been incurred and cannot be recovered or altered by any future action.

Eliminated

Removed or taken away, often used in the context of erasing a component or aspect in various fields such as finance, science, or competition.

Book Value

The net value of a company's assets as recorded on the balance sheet, minus its liabilities and the par value of any outstanding shares.

Opportunity Cost

Opportunity cost is the value of the next best alternative foregone as the result of making a decision.