Exam SY0-701 topic 1 question 497 discussion

The correct answer is C. Perform a risk assessment to classify the vulnerability. Before mitigating a vulnerability in a production server, it's crucial to perform a risk assessment to understand the potential impact and severity of the vulnerability. This helps in prioritizing the mitigation efforts and ensuring that the most critical vulnerabilities are addressed first.

Based on the style of this question with focus on "production server", the kind of answers referring to "software development" or "incident response plan", and similar questions by compTIA, where they ask for scheduled downtimes, I would go with answer D.

Should be D Explanation: ✔ Ensures that changes are properly documented, tested, and approved before implementation. ✔ Prevents unintended downtime or issues by evaluating the impact of the mitigation on the production environment. ✔ Aligns with best practices for system stability and compliance.

A is not correct; there is no point to escalate vulnerability and mitigation. No incidents occur here. Vulnerability may be discovered by SIEM tools. B is not correct, because there is no incident occurring, just a vulnerability found that requires mitigation. C is not correct, because during mitigation there is no point to perform risk assessment.