Cisco Certified Support Technician (CCST) CybersecurityVulnerability ManagementMedium
A security analyst discovers a critical vulnerability in a proprietary application. The vendor has announced that a patch will be released in 30 days. In the meantime, the analyst implements a temporary configuration change on the application's hosting server to prevent exploitation. What is this temporary measure called?
- APatch
- BRemediation
- CMitigation
- DWorkaround
Show answer & explanationAnswer & explanation
Correct answer: D. Workaround
A workaround is a temporary solution or configuration change implemented to reduce the risk of a vulnerability being exploited until a permanent fix (like a patch) can be applied. It's explicitly described as a 'temporary configuration change' until a patch is released.
Why the other options are wrong
- A. A patch is a permanent software update to fix a vulnerability, not a temporary configuration change.
- B. Remediation is the broader process of fixing vulnerabilities; a workaround is a specific type of temporary remediation.
- C. Mitigation is a broad term for reducing the impact or likelihood of an incident; a workaround is a specific form of mitigation.
Workaround (Vulnerability Management)
A temporary solution or alternative method implemented to reduce the risk of a vulnerability being exploited until a permanent fix (e.g., a patch) can be deployed.
- Provides immediate, short-term protection.
- Does not fully resolve the underlying vulnerability.
- Often involves configuration changes, disabling features, or implementing compensating controls.
Memory trick: Patch fixes, Workaround stalls, Mitigation reduces, Remediation is all.