CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ8

Protection of Information Assets

Which of the following BEST enables an organization to identify potential security threats related to a virtualization technique proposed by the vendor of a widely used virtual machine (VM) system?

Explanation

A risk assessment systematically identifies threats, vulnerabilities, likelihood, and impact associated with a proposed technology or implementation. It is therefore the appropriate activity for evaluating security risks introduced by a virtualization technique before adoption.

Community Discussion

No comments yet. Be the first to start the discussion!