ExamGecko
Question list
Search
Search

Question 404 - CISM discussion

Report
Export

A business requires a legacy version of an application to operate but the application cannot be patched. To limit the risk exposure to the business, a firewall is implemented in front of the legacy application. Which risk treatment option has been applied?

A.
Mitigate
Answers
A.
Mitigate
B.
Accept
Answers
B.
Accept
C.
Transfer
Answers
C.
Transfer
D.
Avoid
Answers
D.
Avoid
Suggested answer: A

Explanation:

Mitigate is the risk treatment option that has been applied by implementing a firewall in front of the legacy application because it helps to reduce the impact or probability of a risk. Mitigate is a process of taking actions to lessen the negative effects of a risk, such as implementing security controls, policies, or procedures. A firewall is a security device that monitors and filters the network traffic between the legacy application and the external network, blocking or allowing packets based on predefined rules. A firewall helps to mitigate the risk of unauthorized access, exploitation, or attack on the legacy application that cannot be patched. Therefore, mitigate is the correct answer.

https://simplicable.com/risk/risk-treatment

https://resources.infosecinstitute.com/topic/risk-treatment-options-planning-prevention/

https://www.enisa.europa.eu/topics/risk-management/current-risk/risk-management-inventory/rm-process/risk-treatment.

asked 01/10/2024
Kumail Alsinan
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first