MENU
Which of the following is MOST important for the successful establishment of a security vulnerability
management program?
Suggested Answer: C
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
DA
Daryl
11 months ago
Asset inventory sets the foundation for everything else!
JO
Josephine
12 months ago
Wait, a tabletop exercise plan? Really? Seems less important.
TA
Tandra
12 months ago
Definitely think an approved patching policy is essential.
ME
Melina
12 months ago
I disagree, a tested incident response plan is way more crucial.
FL
Fletcher
1 year ago
A comprehensive asset inventory is key!
IV
Ivory
1 year ago
I thought the tabletop exercises were important for training, but I wonder if they really compare to having a solid asset inventory or incident response plan.
HE
Hermila
1 year ago
I think a tested incident response plan might be more critical since it helps in reacting to vulnerabilities quickly. I saw a similar question in our practice tests.
ET
Ettie
1 year ago
I remember discussing how a comprehensive asset inventory is crucial for identifying vulnerabilities, but I'm not entirely sure if it's the most important.
AL
Albert
1 year ago
I feel like an approved patching policy is essential too, but I can't recall if it was ranked higher than the asset inventory in our studies.
CA
Catalina
1 year ago
Hmm, this one seems tricky. I'll need to carefully review the options and think through the requirements for supporting the NSA DC feature.
TE
Teddy
1 year ago
I think the key here is understanding the NMHPA requirements. Once I've refreshed my memory on that, I should be able to select the correct answer.
TH
Thad
1 year ago
I'm leaning towards "Practices" as the answer. ITIL is all about the processes and procedures, so being able to adapt those to the organization's context seems really important.