A cybersecurity consultant is reviewing the following output from a vulnerability scan against a newly installed MS SQL Server 2012 that is slated to go into production in one week:
 
Based on the above information, which of the following should the system administrator do? (Choose two.)

A. Verify the vulnerability using penetration testing tools or proof-of-concept exploits.

B. Review the references to determine if the vulnerability can be remotely exploited.

C. Mark the result as a false positive so it will show in subsequent scans.

D. Configure a network-based ACL at the perimeter firewall to protect the MS SQL port.

E. Implement the proposed solution by installing Microsoft patch Q316333.






 

Suggested Answer: DE





This question is in CS0-001 CompTIA Cybersecurity Analyst (CySA+) Exam
For getting CompTIA Cybersecurity Analyst (CySA+) Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by CompTIA. 
Trademarks, certification & product names are used for reference only and belong to CompTIA.
The website does not contain actual questions and answers from CompTIA's Certification Exams.