Question

A security analyst receives a vulnerability scan report for an internet-facing web application server. One finding shows a vulnerability with a CVSS base score of 9.8, and threat intelligence confirms it is being actively exploited in the wild via a public proof-of-concept. The vendor has released an out-of-band patch, but the standard monthly maintenance window is three weeks away. Which patching recommendation should the analyst make?

Accepted Answer

Apply the emergency patch immediately after expedited testing through change management, prioritizing it due to active exploitation and internet exposure.

Answer

Wait for the scheduled monthly maintenance window to apply the patch to avoid unplanned downtime.

Answer

Ignore the finding since a compensating firewall exists and re-scan during the next quarterly cycle.

Answer

Downgrade the server to a previous software version to remove the vulnerable feature until the maintenance window.