Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISA Exam - Topic 8 Question 31 Discussion

Which of the following is MOST important for the successful establishment of a security vulnerabilitymanagement program?
C) An approved patching policy
A) A comprehensive asset inventory
B) A tested incident response plan
D) A robust tabletop exercise plan

Isaca CISA Exam - Topic 8 Question 31 Discussion

Actual exam question for Isaca's CISA exam
Question #: 31
Topic #: 8
[All CISA Questions]

Which of the following is MOST important for the successful establishment of a security vulnerability

management program?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Albina at May 06, 2022, 04:32 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Daryl
8 months ago
Asset inventory sets the foundation for everything else!
upvoted 0 times
...
Josephine
9 months ago
Wait, a tabletop exercise plan? Really? Seems less important.
upvoted 0 times
...
Tandra
9 months ago
Definitely think an approved patching policy is essential.
upvoted 0 times
...
Melina
9 months ago
I disagree, a tested incident response plan is way more crucial.
upvoted 0 times
...
Fletcher
9 months ago
A comprehensive asset inventory is key!
upvoted 0 times
...
Ivory
9 months ago
I thought the tabletop exercises were important for training, but I wonder if they really compare to having a solid asset inventory or incident response plan.
upvoted 0 times
...
Hermila
9 months ago
I think a tested incident response plan might be more critical since it helps in reacting to vulnerabilities quickly. I saw a similar question in our practice tests.
upvoted 0 times
...
Ettie
9 months ago
I remember discussing how a comprehensive asset inventory is crucial for identifying vulnerabilities, but I'm not entirely sure if it's the most important.
upvoted 0 times
...
Albert
9 months ago
I feel like an approved patching policy is essential too, but I can't recall if it was ranked higher than the asset inventory in our studies.
upvoted 0 times
...
Catalina
9 months ago
Hmm, this one seems tricky. I'll need to carefully review the options and think through the requirements for supporting the NSA DC feature.
upvoted 0 times
...
Teddy
9 months ago
I think the key here is understanding the NMHPA requirements. Once I've refreshed my memory on that, I should be able to select the correct answer.
upvoted 0 times
...
Thad
10 months ago
I'm leaning towards "Practices" as the answer. ITIL is all about the processes and procedures, so being able to adapt those to the organization's context seems really important.
upvoted 0 times
...

Save Cancel