Prioritize a constrained remediation window

Finding	Observed state	Constraints
BR-41	Public gateway; confirmed vulnerable installed component; active exploitation reported; base severity 8.1	Owner approves supported patch tonight; rollback tested
BR-42	Disconnected test image; base severity 9.8; no production route	Image will be rebuilt next week; isolation independently verified
BR-43	Scanner flags web component from banner only	Vendor backported the fix; package advisory and installed build confirm patched code
BR-44	Legacy production controller; confirmed vulnerability; no internet route	Patch unavailable; vendor approves an access restriction; review in 14 days

Finding

Observed state

Constraints

BR-41

Public gateway; confirmed vulnerable installed component; active exploitation reported; base severity 8.1

Owner approves supported patch tonight; rollback tested

BR-42

Disconnected test image; base severity 9.8; no production route

Image will be rebuilt next week; isolation independently verified

BR-43

Scanner flags web component from banner only

Vendor backported the fix; package advisory and installed build confirm patched code

BR-44

Legacy production controller; confirmed vulnerability; no internet route

Patch unavailable; vendor approves an access restriction; review in 14 days

Scope: owned staging systems 192.0.2.0/28, excluding 192.0.2.7. Goal: inspect installed package state; test credential permissions first. Production controller is not authorized for active scanning. Evidence retention: preserve scanner job, asset identity, timestamps, and remediation ticket.

single choice

Which scan configuration meets the supplied scope and goal?

2 pts

Use tested read-only credentials on the approved staging range with the exclusion applied Scan all discovered networks with exploitation checks enabled Use only public banners to establish the installed patch level Include the production controller because its finding looks severe

Need a hint?

Restate the exact outcome or failure the prompt asks about before comparing choices.

Show another hint

Eliminate choices that solve a nearby problem, change more than requested, or do not fit the evidence.

single choice

Which finding should receive tonight's patch window under the given policy?

2 pts

BR-42, solely because 9.8 exceeds 8.1 BR-43, despite validated evidence of a backported fix BR-44, because a confirmed flaw on a production controller outranks a gateway BR-41, the reachable gateway with confirmed exploitation and an approved patch

Need a hint?

Restate the exact outcome or failure the prompt asks about before comparing choices.

Show another hint

Eliminate choices that solve a nearby problem, change more than requested, or do not fit the evidence.

single choice

How should BR-43 be handled?

2 pts

Suppress every future finding from the web server Run the scanner's exploit-verification check against production to confirm Record the installed build and vendor advisory, then document the scanner exception with review ownership Accept the scanner result and schedule an emergency patch of the web component

Need a hint?

Restate the exact outcome or failure the prompt asks about before comparing choices.

Show another hint

Eliminate choices that solve a nearby problem, change more than requested, or do not fit the evidence.

multi select

Select the THREE records needed for a defensible interim treatment of BR-44.

3 pts

The 14-day review date, treatment owner, and a trigger to reconsider when a patch is available A note that the controller has no internet route, so no further treatment is needed Closure of the finding as remediated once the access restriction is configured The vendor-approved access restriction and a test that it blocks the vulnerable path A named business risk owner and documented residual-risk decision

Need a hint?

Evaluate each option independently against the scenario evidence instead of treating the list as one decision.

Show another hint

Choose only options that directly satisfy the prompt; being generally true is not enough.

Original practice · Review pending

Inspect the evidence

Validated inventory and findings

Scan job

Complete the response

Which scan configuration meets the supplied scope and goal?

Which finding should receive tonight's patch window under the given policy?

How should BR-43 be handled?

Select the THREE records needed for a defensible interim treatment of BR-44.

Review your result

Attempt history

Question or answer look wrong?