TechKnowSurge
CompTIA Security+ 4.3 CompTIA Security+ 2.5 CompTIA CySA+ 2.5 NIST CSF ID.RA-06
TechKnowSurge Catalog Interactives Patch, Segment, Reconfigure or Train?
InteractiveSecurityFree

Patch, Segment, Reconfigure or Train?

A vendor fix is out, a lab PC has no updates left, SMBv1 is on for no reason, staff read passwords out to callers posing as IT: what goes in the action plan?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The Action Plan lesson says a flaw can be a quick fix or a whole project, and an action plan sets out how each one will be handled. It lists the common actions. Patch: if the vendor already has a fix, apply it. Segment or isolate: if a legacy system cannot be fixed but is still needed, move it away from the rest of the network so it can reach only what it needs. Change the configuration: if the flaw is a setting, such as an old protocol switched on or a service nobody uses, change it. Train the people: if the weakness is in what people do, educate them, or change the process they follow. The lesson also mentions compensating controls and adjusting business requirements. The video gives insurance as a compensating control; insurance transfers the risk rather than protecting the system, and Security+ lists it separately. No card here uses insurance. A quick test for each card: is there a fix to install, a system that cannot be fixed and has to be fenced off, a setting to change, or a habit to change?

What you'll learn

Aligned to

CompTIA Security+
4.3 Explain various activities associated with vulnerability management.
2.5 Explain the purpose of mitigation techniques used to secure the enterprise.
CompTIA CySA+
2.5 Explain concepts related to vulnerability response, handling, and management.
NIST CSF
ID.RA-06 Risk responses are chosen, prioritized, planned, tracked, and communicated.

Key terms

Vulnerability Action Plan
A documented set of actionable steps outlining how identified vulnerabilities will be prioritized and mitigated.
Patch
A software update released by a developer to fix security vulnerabilities, bugs, or functionality issues in an operating system or application.
Network Segmentation
The practice of dividing a network into smaller segments to improve performance and limit the spread of security threats.
Configuration Management
The process of tracking and controlling changes to hardware, software, and documentation throughout a system's lifecycle.
Security Awareness Training
An ongoing program that educates employees about cybersecurity threats, safe practices, and organizational policies to reduce human-based risk. Effective training covers topics like phishing recognition, password hygiene, and social engineering.
Legacy System
An outdated computing system, hardware, or software that remains in use despite lacking current vendor support or security patches, often introducing security vulnerabilities.

Topics

Vulnerability Management Remediation Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →