New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA CS0-003 Exam - Topic 2 Question 54 Discussion

Actual exam question for CompTIA's CS0-003 exam
Question #: 54
Topic #: 2
[All CS0-003 Questions]

During a training exercise, a security analyst must determine the vulnerabilities to prioritize. The analyst reviews the following vulnerability scan output:

Which of the following issues should the analyst address first?

Show Suggested Answer Hide Answer
Suggested Answer: A

Allowing anonymous read access to /etc/passwd is a critical vulnerability because it can expose user account details, aiding attackers in password cracking and privilege escalation.

Option B (Anonymous FTP access) is a risk, but /etc/passwd exposure is more critical as it directly affects user authentication.

Option C (Defender updates disabled) is important, but it does not present an immediate attack vector like credential exposure.

Option D (less escape exploit) is significant, but it requires user interaction, making it less immediate than a global credential leak.

Thus, A is the correct answer, as it represents an immediate, high-impact security risk.


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel