Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It's a very tricky question. B and D are enought right depends on the context. If we are looking for on the governace aspect the emergency patch must be consider instead if we are thinking on IR D is more valid. In my mind I get the point D considering more extended compared with B but I'm still doubts
Implementing the Emergency process does not mitigate the risk, as the problem remains unknown. But working on the recommended workaround would reduce the impact till the time the security team works on the applicable patch that can be deployed.
B B talks about the emergency process which means when the patch is released they will patch in high prioritized