CompTIA SecurityX (CAS-005) CAS-005 — Question 310

A security team is evaluating the following vulnerabilities in response to a third-party risk assessment: Given the following organizational policy requirements: • Any adjusted CVSS score of 7.0 or greater must be remediated within 15 days. • Any adjusted CVSS score of 6.9 or less must be remediated within 30 days. • Any vulnerability with a known public exploit must be remediated within seven days. • Any vulnerability that requires high privileges can have a lower severity. Which of the following actions should the analyst do to meet the requirements on time?