Question

A vulnerability scan identifies a critical remote code execution flaw on a legacy manufacturing control server. The vendor no longer supports the operating system, and no patch is available. The server must remain online because it controls an active production line, and it cannot be replaced for at least 18 months due to budget and procurement constraints. Which recommendation BEST reduces the risk while keeping the system operational?

Accepted Answer

Isolate the server on a segmented VLAN with strict firewall rules and deploy host-based intrusion prevention as compensating controls

Answer

Accept the risk and document it in the risk register, taking no further action until the replacement arrives

Answer

Immediately take the server offline until a supported operating system can be installed

Answer

Reclassify the vulnerability as a false positive because no patch exists to remediate it