Question

A systems administrator receives an advisory email that a recently discovered exploit is being used in another country and the financial institutions have ceased operations while they find a way to respond to the attack. Which of the following BEST describes where the administrator should look to find information on the attack to determine if a response must be prepared for the systems?
a.Bug bounty websites
b.Hacker forums
c.Antivirus vendor websites
d.Trade industry association websites
e.CVE database
f.Company’s legal department

Answer 1

Answer: The following BEST describes where the administrator should look to find information on the attack to determine if a response must be prepared for the systems:

• CVE database.

Explanation:

The numbered reference system used to catalog revealed vulnerabilities is called the common vulnerability and exposure system.

It is a dictionary of publicly disclosed cybersecurity vulnerabilities and exposures that is free to search, use and incorporate products and services, according to the terms of use.

The CVE list feeds the US National Vulnerability Database.