ExamGecko
Question list
Search
Search

Related questions











Question 431 - CISA discussion

Report
Export

Which of the following should be the FIRST step m managing the impact of a recently discovered zero-day attack?

A.
Evaluating the likelihood of attack
Answers
A.
Evaluating the likelihood of attack
B.
Estimating potential damage
Answers
B.
Estimating potential damage
C.
Identifying vulnerable assets
Answers
C.
Identifying vulnerable assets
D.
Assessing the Impact of vulnerabilities
Answers
D.
Assessing the Impact of vulnerabilities
Suggested answer: C

Explanation:

The first step in managing the impact of a recently discovered zero-day attack is to identify vulnerable assets. A zero-day attack is a cyberattack that exploits a previously unknown or unpatched vulnerability in a software or system, before the vendor or developer has had time to fix it. Identifying vulnerable assets is crucial for managing the impact of a zero-day attack, because it helps to determine the scope and severity of the attack, prioritize the protection and mitigation measures, and isolate or quarantine the affected assets from further damage or compromise.The other options are not the first steps in managing the impact of a zero-day attack, because they either require more information about the vulnerable assets, or they are part of the subsequent steps of assessing, responding, or recovering from the attack.Reference:CISA Review Manual (Digital Version)1, Chapter 5, Section 5.2.4

asked 18/09/2024
Lara Umemoto
49 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first