Exam 312-50v12 topic 1 question 300 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 300
Topic #: 1

A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 143 million customers. A fix was available from the software vendor for several months prior to the intrusion. This is likely a failure in which of the following security processes?

A. Secure development lifecycle
B. Security awareness training
C. Vendor risk management
D. Patch management

Show Suggested Answer

Suggested Answer: D 🗳️

by qtygbapjpesdayazko at Feb. 24, 2024, 12:59 p.m.

Comments

Submit Cancel

insaniunt

Highly Voted 1 year, 3 months ago

Selected Answer: D

D. Patch management

upvoted 5 times

...

blehbleh

Most Recent 6 months, 1 week ago

Selected Answer: D

This can actually verify a earlier question related to if a company was to be blamed for not resolving all security vulnerabilities they were identified due to low resources. Yes, the company is always still to blame. In this case it was poor patch management.

upvoted 2 times

Mos3ab

3 months, 3 weeks ago

Some say it's shared responsibility but no the company is the one to blame.

upvoted 1 times

...