Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer is A Corruption of files due to malware this is an incident caused by malware exploiting vulnerabilities, not a vulnerability in itself.
A vulnerability refers to a weakness or gap in a security program that can be exploited by threats to gain unauthorized access to an asset. In the given options: A. Delayed removal of employee access This is a vulnerability because it's a procedural weakness that could allow ex-employees or employees who have changed roles to have inappropriate or unauthorized access to systems or data. The other options describe outcomes, events, or conditions resulting from vulnerabilities, but they are not vulnerabilities themselves.
B. Corruption of files due to malware. A vulnerability is a weakness or gap in security controls that can be exploited by threats to compromise the confidentiality, integrity, or availability of information or systems. Among the options provided, "B. Corruption of files due to malware" is considered a vulnerability because it represents a weakness that can be exploited by malware to compromise the integrity of files. The other options describe various scenarios related to security incidents or controls but do not inherently represent weaknesses or gaps that can be exploited, as is the case with vulnerability (B).