Question
An analyst is reviewing a vulnerability report and must make recommendations to the executive team. The analyst finds that most systems can be upgraded with a reboot resulting in a single downtime window. However, two of the critical systems cannot be upgraded due to a vendor appliance that the company does not have access to. Which of the following inhibitors to remediation do these systems and associated vulnerabilities best represent?
- A. Proprietary systems Correct
- B. Legacy systems
- C. Unsupported operating systems
- D. Lack of maintenance windows
Explanation
A vendor appliance the company cannot access is a proprietary system: only the vendor can patch it, so the organization cannot remediate the vulnerabilities itself, which is an inhibitor to remediation listed in the CySA+ objectives. Nothing says the systems are old or out of support, so legacy systems and unsupported operating systems do not fit. A maintenance window is available, since the other systems can be upgraded in a single downtime window.
