CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ29

VerifiedAdversarial Tactics, Techniques, and Procedures

Which of the following should take place FIRST during the vulnerability-identification phase?

Explanation

Relevant stakeholders should be informed before vulnerability scanning begins so that testing is authorized, coordinated, and does not cause unexpected operational disruption. Risk assessment occurs after vulnerabilities are identified.

Community Discussion

No comments yet. Be the first to start the discussion!