A Security Analyst Is Inspecting the Results of a Recent

question 387

Multiple Choice

A security analyst is inspecting the results of a recent internal vulnerability scan that was performed against intranet services. The scan reports include the following critical-rated vulnerability: Title: Remote Command Execution vulnerability in web server Rating: Critical (CVSS 10.0) Threat actor: any remote user of the web server Confidence: certain Recommendation: apply vendor patches Which of the following actions should the security analyst perform FIRST?

• A) Escalate the issue to senior management.
• B) Apply organizational context to the risk rating.
• C) Organize for urgent out-of-cycle patching.
• D) Exploit the server to check whether it is a false positive.

---

Definitions:

Stock Dividend

A form of dividend payment made by a company to its shareholders in the form of additional shares, rather than cash.

Paid-In Capital

The capital received by a company from investors in exchange for stock, representing funds raised beyond the par value of the shares issued.

Paid-In Capital in Excess of Par

The amount of capital received from investors for stock, in excess of the par value of the shares.

Common Stock

A type of equity ownership in a corporation, with voting rights and potential dividends, representing a share in the company's profits and losses.