CompTIA CS0-003 Exam - Topic 1 Question 51 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 51
Topic #: 1

An end-of-life date was announced for a widely used OS. A business-critical function is performed by some machinery that is controlled by a PC, which is utilizing the OS that is approaching the end-of- life date. Which of the following best describes a security analyst's concern?

AAny discovered vulnerabilities will not be remediated.

BAn outage of machinery would cost the organization money.

CSupport will not be available for the critical machinery

DThere are no compensating controls in place for the OS.

Show Suggested Answer

Suggested Answer: A

A security analyst's concern is that any discovered vulnerabilities in the OS that is approaching the end-of-life date will not be remediated by the vendor, leaving the system exposed to potential attacks. The other options are not directly related to the security analyst's role or responsibility. Verified Reference:CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives, page 9, section 2.21

by Heike at Nov 22, 2025, 04:40 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yuette

18 hours ago

But what about the cost of an outage? That's a big deal too.

upvoted 0 times

...

Iesha

6 days ago

Option D is a bit silly. Of course there are no compensating controls for an end-of-life OS - that's the whole problem!

upvoted 0 times

...

Elroy

11 days ago

Haha, the business is really in a pickle. Sounds like they need to upgrade their OS before the end-of-life date or they'll be in deep trouble!

upvoted 0 times

...

Victor

16 days ago

Option C is also a valid concern. Without vendor support, the machinery could fail and the business would be in trouble.

upvoted 0 times

...

Jeanice

21 days ago

Option A is the correct answer. No more security patches means the OS will be vulnerable to attacks.

upvoted 0 times

...

Tonette

27 days ago

I wonder if D is relevant here, but I can't recall if compensating controls were discussed in relation to end-of-life software.

upvoted 0 times

...

Willodean

1 month ago

I'm not entirely sure, but I feel like the financial impact of an outage is significant too, which makes B a contender.

upvoted 0 times

...

Lavonna

1 month ago

I remember a practice question about outdated software, and it mentioned the lack of support being a big issue, so maybe C is also a valid concern.

upvoted 0 times

...

Jillian

1 month ago

I think the main concern is that any discovered vulnerabilities will not be remediated, so I’d lean towards option A.

upvoted 0 times

...

Nieves

2 months ago

I think B is the best answer. An outage of the machinery would be a major financial hit for the organization, regardless of the underlying security concerns with the OS.

upvoted 0 times

...

Roxane

2 months ago

I'm leaning towards C. The lack of support for the OS means there won't be anyone to help troubleshoot or maintain the machinery if something goes wrong. That could lead to costly downtime.

upvoted 0 times

...

Olive

2 months ago

Definitely option A. Without any updates or security patches, any new vulnerabilities that are discovered will just be left unaddressed. That's a huge risk for the critical system.

upvoted 0 times

...

Carlee

2 months ago

A) Any discovered vulnerabilities will not be remediated.

upvoted 0 times

...

Charlena

2 months ago

Any discovered vulnerabilities will not be remediated.

upvoted 0 times

...

Lynelle

3 months ago

C) Support will not be available for the critical machinery.

upvoted 0 times

...

Keena

3 months ago

Totally agree, that's a huge risk!

upvoted 0 times

...

Glen

3 months ago

Hmm, I'm a bit confused. Is the issue that the machinery will just stop working if the OS is no longer supported? Or is it more about potential security vulnerabilities that could be exploited?

upvoted 0 times

...

Mollie

3 months ago

I think the key here is that the OS is reaching end-of-life, so any vulnerabilities found won't be patched. That's a major security concern for the business-critical machinery.

upvoted 0 times

Susana

2 months ago

The lack of patches is a huge risk!

upvoted 0 times

...