A Penetration Tester Has Performed a Security Assessment for a Startup

question 165

Multiple Choice

A penetration tester has performed a security assessment for a startup firm. The report lists a total of ten vulnerabilities, with five identified as critical. The client does not have the resources to immediately remediate all vulnerabilities. Under such circumstances, which of the following would be the BEST suggestion for the client?

• A) Apply easy compensating controls for critical vulnerabilities to minimize the risk, and then reprioritize remediation.
• B) Identify the issues that can be remediated most quickly and address them first.
• C) Implement the least impactful of the critical vulnerabilities' remediations first, and then address other critical vulnerabilities
• D) Fix the most critical vulnerability first, even if it means fixing the other vulnerabilities may take a very long lime.

---

Definitions:

Class Action Suit

A legal action filed by one or more plaintiffs on behalf of a larger group of people who are similarly affected by the same issue.

Gas Tanks Exploded

Incidents where gas tanks ignite and cause an explosion, typically due to leakage and ignition from an external source.

Market Positioning

Involves the process of defining the marketing mix variables so that target customers have a clear, distinctive, desirable understanding of what the product does or represents in comparison with competing products.

Marketing Mix Variables

The controllable factors that a company uses to influence consumers' purchase decisions, traditionally known as the 4Ps: Product, Price, Place, and Promotion.