ISACA Certified Information Systems Auditor Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Zero-day attack exploits a security vulnerability that is not yet known or patched. Finding systems or data that are exposed to the attack is the first thing to be done to understand where the vulnerability exists.

• Chose B1

  Wrote B and turns out it's correct but the wording "managing impact" confused me.

• Chose B1

  Identification is paramount first. Without it, it is not possible to assess the impact