An Engineer Is Going Through Vulnerability Triage with Company Management

Multiple Choice

An engineer is going through vulnerability triage with company management because of a recent malware outbreak from which 21 affected assets need to be patched or remediated. Management decides not to prioritize fixing the assets and accepts the vulnerabilities. What is the next step the engineer should take?

A) Investigate the vulnerability to prevent further spread
B) Acknowledge the vulnerabilities and document the risk
C) Apply vendor patches or available hot fixes
D) Isolate the assets affected in a separate network