mediumMultiple ChoiceObjective-mapped
CS0-003 Practice Question: A vulnerability scanner reports that an internal…
A vulnerability scanner reports that an internal web application is vulnerable to SQL injection. The development team says they fixed it by input sanitization. Which of the following should the analyst do FIRST?
⚠ Common exam trap
CompTIA often tests the misconception that reviewing code changes is the immediate next step, but the correct first action is always to verify the fix with the same scanning tool to maintain an objective audit trail.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rescan the application to confirm remediation
The first step after a claimed fix is to verify the remediation by rescanning the application with the same vulnerability scanner. This provides objective evidence that the SQL injection vector is no longer exploitable, confirming the input sanitization was effective before any further actions are taken.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Update the vulnerability report
Why it's wrong here
Updating the vulnerability report prematurely, before objectively confirming remediation, is an inefficient and potentially misleading action. The report should accurately reflect the current, verified status of vulnerabilities, and without a rescan, there is no objective evidence that the reported flaw has been successfully addressed. This step comes after verification, not before, to ensure accuracy and avoid false closures.
- ✗
Perform a manual penetration test
Why it's wrong here
While manual penetration testing can uncover complex, logic-based vulnerabilities that automated scanners might miss, it is a resource-intensive and time-consuming process. After a development team claims remediation for a vulnerability initially found by a scanner, the most efficient and immediate first step is to re-run the automated scan to quickly confirm the fix, reserving manual testing for more intricate validation or when automated tools prove insufficient for verification.
- ✓
Rescan the application to confirm remediation
Why this is correct
Rescanning the application with the vulnerability scanner is the most direct, efficient, and objective method to confirm whether the reported vulnerability has been successfully remediated. This automated verification provides immediate, tangible evidence, quickly validating the development team's claim of a fix and ensuring the flaw no longer appears in subsequent reports, which is crucial before closing the vulnerability ticket and moving to the next phase of the vulnerability management lifecycle.
- ✗
Review the code changes
Why it's wrong here
Reviewing code changes would verify the sanitisation logic, but the vulnerability scanner’s report indicates a potential SQL injection flaw that may bypass input sanitisation entirely—for example, through second-order injection or stored procedures. This option is tempting because code review is a standard step after a claimed fix, and it would be correct if the development team had implemented parameterised queries and the analyst needed to confirm their correct application.
Go deeper
Related to this question
Learn chapter
Vulnerability Scanning Techniques
Key term
Vulnerability
A vulnerability is a weakness in a system, network, or software that could be exploited by a threat to cause harm or unauthorized access.
Key term
SQL injection
SQL injection is a web security vulnerability that allows an attacker to interfere with the queries an application makes to its database, often to read, modify, or destroy data.
About these practice questions
This CS0-004 question is part of Courseiva's 236-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.