Discuss PECB ISO-IEC-27035-Lead-Incident-Manager Exam Topic 1 Question 9

How should vulnerabilities lacking corresponding threats be handled?

AThey still require controls and should be promptly addressed

BThey should be disregarded as they pose no risk

CThey may not require controls but should be analyzed and monitored for changes

Suggested Answer: C

Get Premium ISO-IEC-27035-Lead-Incident-Manager Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Maybelle 1 month ago

C is a good middle ground. Analyze first, then decide.

Dortha 1 month ago

A is safer. Better to be proactive than reactive.

Bernadine 1 month ago

C makes sense too. Monitoring is important.

Alaine 2 months ago

B seems too careless. We can't just disregard them.

Stephaine 2 months ago

I agree with A. Ignoring them is risky.

Dick 2 months ago

I think A is the best choice. Vulnerabilities can become threats anytime.

Royal 2 months ago

C is a good middle ground. Analyze first, then decide.

Vernice 2 months ago

A is safer. Better to be proactive than reactive.

Eliseo 2 months ago

C makes sense too. Monitoring is important.

Cary 3 months ago

B seems too careless. We can't just disregard them.

Rosio 3 months ago

I agree with A. Ignoring them is risky.

Christa 3 months ago

I think A is the best choice. Vulnerabilities can become threats anytime.

Anisha 3 months ago

Totally agree with A! Vulnerabilities can lead to unexpected issues.

Rolf 3 months ago

Wait, how can we just ignore vulnerabilities? That sounds off.

Tawna 4 months ago

C) I think monitoring is smart, but controls might still be needed.

Benton 5 months ago

B) Disregarding them seems risky to me.

Dana 5 months ago

A) definitely needs controls! Better safe than sorry.

Katie 6 months ago

I’m a bit confused; I thought we learned that all vulnerabilities should be treated seriously, but I’m not sure if that means they need controls or just monitoring.

Venita 6 months ago

I recall a practice question where we had to decide if vulnerabilities should be addressed, and I think the answer was to analyze them, which sounds like C again.

Sherill 6 months ago

I’m not entirely sure, but I feel like we discussed that even if there’s no immediate threat, we shouldn’t just ignore vulnerabilities. Could it be A?

Cassi 6 months ago

I think I remember that vulnerabilities without threats still need some level of monitoring, so maybe option C is the right choice?

PECB ISO-IEC-27035-Lead-Incident-Manager Exam - Topic 1 Question 9 Discussion