During an internal code review, software called " ACE " was discovered to have a...

Vendor: CompTIA
Product: CS0-003
Update on: May 14, 2026
Questions: 482

CompTIA CS0-003 Question Answer

During an internal code review, software called " ACE " was discovered to have a vulnerability that allows the execution of arbitrary code. The vulnerability is in a legacy, third-party vendor resource that is used by the ACE software. ACE is used worldwide and is essential for many businesses in this industry. Developers informed the Chief Information Security Officer that removal of the vulnerability will take time. Which of the following is the first action to take?

Look for potential loCs in the company.

Inform customers of the vulnerability.

Remove the affected vendor resource from the ACE software.

Develop a compensating control until the issue can be fixed permanently.