Courseiva
← CAS-005
Full test
Security Operations →mediumMultiple ChoiceObjective-mapped

CAS-004 Security Operations Practice Question

During a vulnerability assessment, a security analyst discovers a critical vulnerability in a legacy application that cannot be patched due to vendor end-of-life. Which compensating control would best mitigate the risk?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Implement network segmentation to isolate the application

Network segmentation isolates the vulnerable system, reducing the attack surface and preventing lateral movement from a compromised system.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Apply a virtual patch via an intrusion prevention system (IPS)

    Why it's wrong here

    Virtual patching can work, but legacy applications may have specific behaviors that IPS might break.

  • ✓

    Implement network segmentation to isolate the application

    Why this is correct

    Segmentation is a strong compensating control that limits exposure.

  • ✗

    Increase logging and monitoring for that application

    Why it's wrong here

    Monitoring alone does not prevent exploitation.

  • ✗

    Decommission the application immediately

    Why it's wrong here

    Decommissioning may not be possible if the application is critical.

About these practice questions

One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.