medium
Single Answer
0

Earlier this year, the information security team at Alekos's employer identified a vulnerability in the web server that Alekos is responsible for maintaining. He immediately applied the patch and is sure that it installed properly, but the vulnerability scanner has continued to incorrectly flag the system as vulnerable. To prevent the issue from being flagged incorrectly in the future, what is the next step?

Answer Options

A

Uninstall and reinstall the patch.

B

Ask the information security team to flag the system as patched and not vulnerable to that particular flaw.

C

Update the version information in the web server's configuration.

D

Review the vulnerability report and use alternate remediation options.

Correct Answer: B

Explanation

Alekos should ask the information security team to flag the issue as resolved if he is sure the patch was installed. Many vulnerability scanners rely on version or banner information and may flag patched versions if the software provider does not update the detected information. Uninstalling and reinstalling the patch will not change this, changing the version information may not suppress all false positives and can cause maintenance issues later, and alternative remediation should not be necessary if the proper patch is applied.