Câu 210: SY0-501: CompTIA Security+

A security analyst is inspecting the results of a recent internal vulnerability scan that was performed against intranet services. The scan reports include the following critical-rated vulnerability: Title: Remote Command Execution vulnerability in web server Rating: Critical (CVSS 10.0)Threat actor: any remote user of the web serverConfidence: certain -Recommendation: apply vendor patchesWhich of the following actions should the security analyst perform FIRST?

1. A. Escalate the issue to senior management.
2. B. Apply organizational context to the risk rating. — đáp án hiện tại
3. C. Organize for urgent out-of-cycle patching.
4. D. Exploit the server to check whether it is a false positive.