CompTIA CS0-003 Exam - Topic 1 Question 51 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 51
Topic #: 1

An end-of-life date was announced for a widely used OS. A business-critical function is performed by some machinery that is controlled by a PC, which is utilizing the OS that is approaching the end-of- life date. Which of the following best describes a security analyst's concern?

AAny discovered vulnerabilities will not be remediated.

BAn outage of machinery would cost the organization money.

CSupport will not be available for the critical machinery

DThere are no compensating controls in place for the OS.

Show Suggested Answer

Suggested Answer: A

A security analyst's concern is that any discovered vulnerabilities in the OS that is approaching the end-of-life date will not be remediated by the vendor, leaving the system exposed to potential attacks. The other options are not directly related to the security analyst's role or responsibility. Verified Reference:CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives, page 9, section 2.21

by Heike at Nov 22, 2025, 04:40 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emmanuel

2 months ago

D) There are no compensating controls in place for the OS.

upvoted 0 times

...

Cristy

2 months ago

I feel B is crucial. Downtime is expensive!

upvoted 0 times

...

Donette

2 months ago

B) An outage of machinery would cost the organization money.

upvoted 0 times

...

Edda

2 months ago

Definitely A. No updates mean more risks.

upvoted 0 times

...

Viola

2 months ago

There are no compensating controls? That's a major red flag!

upvoted 0 times

...

Annamaria

2 months ago

Wait, are they really just going to stop supporting it? That seems wild.

upvoted 0 times

...

Yuette

3 months ago

But what about the cost of an outage? That's a big deal too.

upvoted 0 times

...

Iesha

3 months ago

Option D is a bit silly. Of course there are no compensating controls for an end-of-life OS - that's the whole problem!

upvoted 0 times

...

Elroy

3 months ago

Haha, the business is really in a pickle. Sounds like they need to upgrade their OS before the end-of-life date or they'll be in deep trouble!

upvoted 0 times

...

Victor

4 months ago

Option C is also a valid concern. Without vendor support, the machinery could fail and the business would be in trouble.

upvoted 0 times

...

Jeanice

4 months ago

Option A is the correct answer. No more security patches means the OS will be vulnerable to attacks.

upvoted 0 times

...

Tonette

4 months ago

I wonder if D is relevant here, but I can't recall if compensating controls were discussed in relation to end-of-life software.

upvoted 0 times

...

Willodean

4 months ago

I'm not entirely sure, but I feel like the financial impact of an outage is significant too, which makes B a contender.

upvoted 0 times

...

Lavonna

4 months ago

I remember a practice question about outdated software, and it mentioned the lack of support being a big issue, so maybe C is also a valid concern.

upvoted 0 times

...

Jillian

4 months ago

I think the main concern is that any discovered vulnerabilities will not be remediated, so I’d lean towards option A.

upvoted 0 times

...

Nieves

5 months ago

I think B is the best answer. An outage of the machinery would be a major financial hit for the organization, regardless of the underlying security concerns with the OS.

upvoted 0 times

...

Roxane

5 months ago

I'm leaning towards C. The lack of support for the OS means there won't be anyone to help troubleshoot or maintain the machinery if something goes wrong. That could lead to costly downtime.

upvoted 0 times

...

Olive

5 months ago

Definitely option A. Without any updates or security patches, any new vulnerabilities that are discovered will just be left unaddressed. That's a huge risk for the critical system.

upvoted 0 times

...

Carlee

5 months ago

A) Any discovered vulnerabilities will not be remediated.

upvoted 0 times

...

Charlena

5 months ago

Any discovered vulnerabilities will not be remediated.

upvoted 0 times

...

Lynelle

6 months ago

C) Support will not be available for the critical machinery.

upvoted 0 times

...

Keena

6 months ago

Totally agree, that's a huge risk!

upvoted 0 times

...

Glen

6 months ago

Hmm, I'm a bit confused. Is the issue that the machinery will just stop working if the OS is no longer supported? Or is it more about potential security vulnerabilities that could be exploited?

upvoted 0 times

...

Mollie

6 months ago

I think the key here is that the OS is reaching end-of-life, so any vulnerabilities found won't be patched. That's a major security concern for the business-critical machinery.

upvoted 0 times