MENU
Which of the following would BEST mitigate the ongoing risk associated with operating system (OS) vulnerabilities?
Suggested Answer: C
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
16 comments · newest first
TA
Tamar
11 months ago
Yeah, B is the best choice for long-term security!
GE
Gerald
12 months ago
Surprised that people think D is enough, we need more than just identification!
DA
Daniela
12 months ago
A seems risky, just temporary fixes won't cut it.
JO
Jonell
12 months ago
I think C is better, permanent fixes are the way to go.
LU
Luisa
1 year ago
Definitely B, a solid patching process is key!
BO
Boris
1 year ago
I'm a bit confused; I feel like all options could help, but I think temporarily mitigating vulnerabilities isn't a long-term solution.
JI
Jina
1 year ago
I practiced a similar question where documenting a patching process was highlighted as essential, so I might lean towards that.
EM
Emogene
1 year ago
I think evaluating permanent fixes like patches and upgrades is crucial, but I wonder if just identifying vulnerabilities is enough.
DE
Deandrea
1 year ago
I remember we discussed the importance of having a solid patching process, but I'm not sure if that's the best answer here.
EZ
Ezekiel
1 year ago
Hmm, I'm not sure if that's the right answer. Maybe I should consider the other options as well before making a decision.
AN
Annice
1 year ago
I think the key is to get to the root cause of the problem. The audit identified that the bank was failing to verify if securities were lost or stolen, so I'd focus on reviewing those policies and procedures first before doing anything else.
CH
Chauncey
1 year ago
Hmm, I'm not totally sure about this one. I know BootP and RARP are both related to network booting, but I'm not confident which one is the right answer here.
GA
Gabriele
1 year ago
This is a good one to test our understanding of valuation. I'll need to be really careful with the assumptions and calculations to get the right answer.
ME
Melissa
1 year ago
Hmm, I'm a bit confused on the specifics here. Does the fact that the companies are "blacklisted" mean they are part of an international boycott? I'll have to think this through step-by-step.
AL
Almeta
1 year ago
Okay, the key here is to find files owned by root with the SUID bit set in the /usr directory. I think option A is the way to go.
VA
Valda
1 year ago
Okay, let me think this through. Disparate treatment is when an employer treats someone differently based on a protected characteristic, so I'm going to go with option C.