cisco certified network associate-security

cisco certified network associate-security.Critical 9.0-10.0each unit can use the CVSS score as an input to its risk management process to assess the risk associated with a vulnerability.5.7.3 Vulnerability RemediationVulnerability remediation is the third phase of vulnerability management. A common approach to fixing vulnerabilities is to patch or update the system after givingsystem to fix the system flaws that could lead to a vulnerability. Before patching or updating a system, you need to perform detailed and obtain single-exhaustive testing, schedule a maintenance window for the system, and bit of approval. The process of taking control of system patching (patching) and system updates is described later in this chapter.Patching a system takes quite a bit of time (let's say that only after carefully testing the patches to be applied can they be applied and then the vulnerabilities can be fixed according to the priority of the risk. See Chapter 3 for details related to risk management and risk assessment methods. (for production environments). With this in mind, the risk management committee needs to make a compromise between leaving the system "bare" (no patching of the system) and fully testing the patch (time wasting and risky). Until the formal patch management process has been completed, if necessary, temporary leak blocking and vulnerability mitigation measures can be used to temporarily reduce the probability of vulnerabilities being exploited. and the associatedThe impact.The "vulnerabilityworkaround" is a technical solution that can be used toIt prevents the vulnerability from being exploited and does not affect the service or functionality that is subject to the vulnerability. Creating an access control list on a device that discards the particular malicious packet that triggered the vulnerability is a temporary plugging measure. Vulnerability mitigation (mitigation) is a technical solution that can limit the risk or impact of a vulnerability. Configuring an access control list to limit the number of hosts that send attack packets (i.e., restricting the source IP address of packets in the inbound direction) is a form of vulnerability mitigation. Vulnerability mitigation measures do not eliminate the risk of exploitation of vulnerabilities, but they do limit the number of attackers5.8 Patch Management 282