Study. uk . com
  1. Home
  2. All questions
  3. Question 108

CompTIA Security+ study material · question 108 of 611

An unused reporting service on a server has an unpatched critical flaw. The business confirms nobody uses it. Which response is avoidance?

  1. Recording it in the plan of action and milestones
  2. Accepting the risk and monitoring for exploitation
  3. Uninstalling the service
  4. Placing the server behind a web application firewall
Show the answer

Answer: C. Uninstalling the service

Avoidance eliminates the attack surface. Firewalling is mitigation and monitoring is acceptance.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.1 Risk Responses

Challenge yourself on this topic → Study as cards