Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. Conduct a vulnerability assessment The best response in this case would be to conduct a vulnerability assessment. This assessment will determine if the reported vulnerability exists in the organization's systems. If the vulnerability is present, the organization can then determine the potential impact and develop a plan to mitigate or eliminate the vulnerability. Other responses such as assessing the vulnerability management process, conducting a control self-assessment, or reassessing the inherent risk of the target might be valid steps at a later stage or in a different context, but they are not the immediate response to an actively exploited, known technical vulnerability.
Apparently. First assess if you are vulnerable, then take the proper action
Its definitely D