Exam SY0-601 topic 1 question 769 discussion

Actual exam question from CompTIA's SY0-601

Question #: 769
Topic #: 1

A vulnerability scan returned the following results:

2 Critical
5 High
15 Medium
98 Low

Which of the following would the information security team most likely use to decide if all discovered vulnerabilities must be addressed and the order in which they should be addressed?

A. Risk appetite
B. Risk register
C. Risk matrix
D. Risk acceptance

Show Suggested Answer

Suggested Answer: C 🗳️

by maggie22 at Jan. 17, 2024, 7:05 p.m.

Comments

Submit Cancel

shady23

1 year, 1 month ago

Selected Answer: C

C. Risk matrix

upvoted 1 times

...

salah112

1 year, 4 months ago

Selected Answer: C

C. Risk matrix A risk matrix is a tool commonly used by information security teams to assess and prioritize vulnerabilities based on their impact and likelihood. It helps in deciding which vulnerabilities should be addressed first and guides the allocation of resources for remediation efforts. The risk matrix typically categorizes risks (including vulnerabilities) into different levels based on severity, allowing organizations to focus on addressing the most critical ones.

upvoted 4 times

...

Hs1208

1 year, 5 months ago

Selected Answer: C

Risk Matrix which is a part of Risk Assessment.

upvoted 2 times

...

maggie22

1 year, 5 months ago

Selected Answer: C

Risk matrix is a tool used to prioritize vulnerabilities based on their risk level, which helps organizations determine the order in which vulnerabilities should be addressed. By calculating vulnerability risk, enterprises can assign a risk level to vulnerabilities and assets to help determine how vulnerabilities are addressed. Source: Isaca.org

upvoted 2 times

...