A vulnerability scan finds two issues: a critical deserialization flaw on a non-production lab server behind a VPN, and a high-severity privilege escalation flaw on the production jump server that administrators use to reach the rest of the environment. Which should be remediated first?

The lab server flaw, because critical severity always comes first

Severity matters, but exposure and business impact must also be considered when prioritizing remediation.

Neither issue, because VPN access reduces the need for urgent remediation

VPN access does not eliminate risk, and both findings still need remediation planning.

The lab server flaw, because non-production systems are always easier to patch later

Non-production status alone does not make a system more urgent than a production system used for privileged administration.

What does this SY0-701 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: The jump server flaw, because it affects a production administrative access point — The jump server flaw should be remediated first because it sits in a high-value path to the rest of the environment. Even though the lab finding is labeled critical, the jump server is a production administrative access point and likely has greater business impact if exploited. Prioritization should combine severity with exposure, privilege level, and the role of the affected system in the organization. Why others are wrong: Critical severity alone is not enough to prioritize without context. VPN access reduces exposure somewhat, but it does not make the risk acceptable. Lab systems still need fixes, yet they are less urgent than a vulnerability on a production jump host used by administrators.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.