Cisco Certified Support Technician (CCST) CybersecurityVulnerability ManagementMedium
After a vulnerability scan identifies several critical vulnerabilities on a production server, the security team decides to apply the recommended patches during the next scheduled maintenance window. Before applying the patches, they create a full backup of the server and plan for rollback procedures. What phase of vulnerability remediation does this activity PRIMARILY represent?
- AVulnerability identification
- BRemediation planning
- CRisk assessment
- DVerification
Show answer & explanationAnswer & explanation
Correct answer: B. Remediation planning
Creating backups and planning for rollback procedures are crucial steps taken *before* implementing a fix. These activities fall under remediation planning, ensuring that the remediation process is smooth and reversible if issues arise.
Why the other options are wrong
- A. Identification occurs when the scan finds the vulnerability, which has already happened.
- C. Risk assessment involves prioritizing the vulnerability, which also happens before planning the fix.
- D. Verification happens *after* the patches are applied to confirm success, not before.
Remediation Planning
The phase in vulnerability management where actions are designed and prepared to address identified vulnerabilities, including scheduling, backups, and rollback strategies.
- Occurs after assessment and prioritization.
- Involves detailed steps for applying fixes.
- Includes contingency plans like backups and rollbacks.
Memory trick: Plan, Fix, Test, Repeat.