Study. uk . com
  1. Home
  2. All questions
  3. Question 493

CompTIA Security+ study material · question 493 of 611

A flaw is being exploited and no patch exists. What is the appropriate response posture?

  1. Reclassifying the finding as informational
  2. Risk acceptance with no further action
  3. Compensating controls and heightened detection
  4. Remediation, applying the vendor fix
Show the answer

Answer: C. Compensating controls and heightened detection

With no fix available, the response is to reduce exposure and improve the chance of noticing exploitation.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.1 Risk Responses

Challenge yourself on this topic → Study as cards