Isaca CISA Exam - Topic 8 Question 31 Discussion

Actual exam question for Isaca's CISA exam

Question #: 31
Topic #: 8

[All CISA Questions]

Which of the following is MOST important for the successful establishment of a security vulnerability

management program?

AA comprehensive asset inventory

BA tested incident response plan

CAn approved patching policy

DA robust tabletop exercise plan

Show Suggested Answer

Suggested Answer: C

by Albina at May 06, 2022, 04:32 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Daryl

4 months ago

Asset inventory sets the foundation for everything else!

upvoted 0 times

...

Josephine

4 months ago

Wait, a tabletop exercise plan? Really? Seems less important.

upvoted 0 times

...

Tandra

4 months ago

Definitely think an approved patching policy is essential.

upvoted 0 times

...

Melina

4 months ago

I disagree, a tested incident response plan is way more crucial.

upvoted 0 times

...

Fletcher

5 months ago

A comprehensive asset inventory is key!

upvoted 0 times

...

Ivory

5 months ago

I thought the tabletop exercises were important for training, but I wonder if they really compare to having a solid asset inventory or incident response plan.

upvoted 0 times

...

Hermila

5 months ago

I think a tested incident response plan might be more critical since it helps in reacting to vulnerabilities quickly. I saw a similar question in our practice tests.

upvoted 0 times

...

Ettie

5 months ago

I remember discussing how a comprehensive asset inventory is crucial for identifying vulnerabilities, but I'm not entirely sure if it's the most important.

upvoted 0 times

...

Albert

5 months ago

I feel like an approved patching policy is essential too, but I can't recall if it was ranked higher than the asset inventory in our studies.

upvoted 0 times

...

Catalina

5 months ago

Hmm, this one seems tricky. I'll need to carefully review the options and think through the requirements for supporting the NSA DC feature.

upvoted 0 times

...

Teddy

5 months ago

I think the key here is understanding the NMHPA requirements. Once I've refreshed my memory on that, I should be able to select the correct answer.

upvoted 0 times

...

Thad

5 months ago

I'm leaning towards "Practices" as the answer. ITIL is all about the processes and procedures, so being able to adapt those to the organization's context seems really important.

upvoted 0 times

...