Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released. Which of the following would best protect this organization?
I think they trying to trick you...
I am looking at the key words Response vs Remediation.
Response - Incident response activities include detection, analysis, containment, eradication, recovery, communication, and documentation.
Remediation - Remediation activities include applying patches, fixing misconfigurations, updating security policies, improving access controls, and implementing other corrective measures.
And we can also Calculate mean time to respond by measuring the time from when your team detects an incident to when you launch (or complete) the repair or remediation plan. So answer is A
Not sure if A or C.
I'm leaning more to A.
The term 'mean time to remediate' is a definition - at least in comptia study guide!
It is used in the IR metrics chapter.
So we have it in this order:
mean time to detect
mean time to respond
mean time to remediate
I would say "mean time to respond" does not include patching, but in it is in the "mean time to remediate", so that is why I choose A.
the answer is A. Remediation because the patch is already there. Responding takes place when the patch is not there.Mean time to respond (MTTR) is the average time it takes DevOps teams to respond after receiving an alert. Teams often use this metric to measure the time between when they detect an incident and when they mount a remediation plan. Many teams include the time it takes to repair or remediate the issue in this metric. This does not include lag time in the alert system.
And we can also Calculate mean time to respond by measuring the time from when your team detects an incident to when you launch (or complete) the repair or remediation plan. So answer is A
I think the more viable answer is Mean Time to Remediate.
Remediation incorporates the response and determines the average time it is resolved by.
Response does not determine when the issue is remediated, simple that it is being responded to.
Since Remediation incorporates response and is below the 45 day window of exploitations this seems like the best answer that takes away all guesswork.
A mean time to remediate of 30 days implies that the organization aims to remediate vulnerabilities within 30 days of their discovery. Since exploitation of new attacks tends to occur approximately 45 days after a patch is released, aiming for a mean time to remediate of 30 days ensures that vulnerabilities are patched before attackers have the opportunity to exploit them.
C is correct. When you have a response policy that requires a review at least every 15 days, it will help the company recognize all newly patched exploitations within that timeframe, as a mean time to respond (MTTR) of 15 days is required.
When you discover a risk, your team will fix it right away with just a click of a button to update the patch released 15 days ago. The goal is to find out about it ASAP. It is nonsensical to compare mean time to remediate or respond in this context.
Are you going to sit there after you have responded to it and watch because no-one told you to remediate it, or act honorably, honestly, justly, and responsibly by fixing the issue as soon as possible with your professional responsibility?
Guys this is C 100%, this question is eluding to the fact that the company are taking too long to patch vulnerable systems. A mean time to respond of 15 days is much better & faster than a mean time to remediate of 30 days.
What is MTTR - Mean Time to Respond/Remediate? MTTR is the amount of time it takes an organization to neutralize an identified threat or failure within their network environment. Threat remediation is the process organizations use to identify and resolve threats to their network environment.
To best protect the organization from exploitation of new attacks, it's important to reduce the time between the release of patches and their implementation within the organization. This is known as the "time to remediate" or "mean time to remediate" (MTTR). Therefore, the option that aligns with this objective is:
A. A mean time to remediate of 30 days
A shorter mean time to remediate ensures that patches are applied more quickly, reducing the window of vulnerability and the likelihood of exploitation. Options B and C, with longer timeframes, would increase the organization's exposure to potential attacks. Third-party application testing (option D) is important but is not directly addressing the time it takes to apply patches after they are released.
Mean time to respond refers to the average time it takes an organization to respond to a security incident after it has been detected. A shorter mean time to respond is generally associated with more effective incident response and containment.
Agree on C. You can't fix something you don't know is broken. It also make sense to have 30 days SLA to remediate critical vulnerability in most production - after it's detected.
In summary, the correct answer is "30 days average time to remediate" because it focuses on the time frame for effective application of fixes and patches, which is critical to cybersecurity, rather than just the initial response to an alert. This helps ensure that vulnerabilities are patched in a timely manner and reduces exposure to security risks.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ha33yp0tt3r69
Highly Voted 4 months, 2 weeks agoRee1234
6 days, 3 hours agomuvisan
Highly Voted 6 months, 3 weeks agoMehe323
Most Recent 5 days, 11 hours agoRee1234
6 days, 3 hours agoRee1234
6 days, 3 hours agoRee1234
6 days, 3 hours agoArunxr
3 weeks, 1 day agoBanesTech
3 weeks, 4 days agocarletten
1 month, 2 weeks agobolinhtinh
2 months, 2 weeks agoB3hindCl0sedD00rs
2 months, 4 weeks agosujon_london
3 months, 2 weeks agoRobV
5 months, 1 week agoRobV
5 months, 1 week agoNarobi
5 months, 1 week agogreatsparta
6 months agoBigBear
7 months, 3 weeks agoTdarling77
1 month, 1 week agokmordalv
7 months ago[Removed]
8 months agodeeden
7 months agoJhonys
8 months agokmordalv
7 months agoJhonys
5 months, 3 weeks ago