CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ718

Risk Assessment

Which of the following is considered a vulnerability?

  • A Delayed removal of employee access
  • B Corruption of files due to malware
  • C Authorized administrative access to HR files
  • D Server downtime due to a denial of service (DoS) attack
Explanation

A vulnerability is a weakness in security controls. Failing to remove employee access promptly can leave unnecessary credentials or permissions available for misuse.

Community Discussion

No comments yet. Be the first to start the discussion!