Take Action Against Critical Vulnerability: Update Firmware | CompTIA Network+ Exam Prep

A critical vulnerability is discovered on a network device.

The vendor states it has already patched this vulnerability in its current release.

Which of the following actions should an administrator take?

A.

Change the default password

B.

Use a firewall in front of the device.

C.

Update the firmware.

D.

Upgrade the configuration.

C.

Option C, "Update the firmware," is the correct action to take when a critical vulnerability has been discovered on a network device, and the vendor has released a patch for the vulnerability.

Firmware is the software that is embedded into a device's hardware, and it provides low-level control over the device's operations. Firmware updates can fix bugs, improve functionality, and, most importantly, address security vulnerabilities.

When a vendor releases a patch for a critical vulnerability, it is essential to update the firmware on the affected device as soon as possible. This will ensure that the vulnerability is mitigated and that the device is secure from any known exploits. Updating the firmware can usually be done through the device's web interface or command-line interface.

Changing the default password (Option A) and using a firewall in front of the device (Option B) are both important security measures, but they are not the correct actions to take in this scenario. Changing the default password can prevent unauthorized access to the device, but it will not fix the vulnerability. Using a firewall in front of the device can help to filter out malicious traffic, but it will not fix the vulnerability either.

Upgrading the configuration (Option D) can be a useful step in improving a device's security, but it is not the correct action to take in this scenario. Upgrading the configuration usually involves making changes to the device's settings and policies, which can improve security, but it will not address the specific vulnerability that has been discovered.

Therefore, the best course of action to take when a critical vulnerability is discovered on a network device is to update the firmware.