CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1535

Technology and Security

Which of the following is an example of a vulnerability?

  • A An employee recently fired for insubordination
  • B An identity thief seeking to acquire personal financial data from an organization
  • C Media recognition of an organization's market leadership in its industry
  • D A standard procedure for applying software patches two weeks after release
Explanation

A procedure that delays applying software patches for two weeks can leave known security flaws exposed and exploitable during that period, constituting a vulnerability.

Community Discussion

No comments yet. Be the first to start the discussion!