Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think the answer should be D. The question is talking about "Identified" threats which mostly means that these are the threats that were identified after installing baseline configurations.
D.. If the vulnerability has been "identified" wouldnt a risk assessment be more reasonable than " enforcing baseline configuration"? when you add "identified" it makes me think we need a risk assessment to ensure that appropriate and effective controls are implemented.
Key words "technical" and "remediate", so C.