Exam CISM topic 1 question 1155 discussion

Actual exam question from Isaca's CISM

Question #: 1155
Topic #: 1

An information security team has confirmed that threat actors are taking advantage of a newly announced critical vulnerability within an application. Which of the following should be done FIRST?

A. Notify senior management.
B. Prevent access to the application.
C. Invoke the incident response plan.
D. Install additional application controls.

Show Suggested Answer

Suggested Answer: C 🗳️

by 1899f17 at May 24, 2024, 8:26 a.m.

Comments

Submit Cancel

koala_lay

10 months, 3 weeks ago

Selected Answer: C

When a critical vulnerability is discovered that is being actively exploited by threat actors, the first and most important step is to invoke the organization's incident response plan. This plan provides a structured and well-defined process for responding to security incidents, ensuring that the appropriate actions are taken in a timely and coordinated manner.

upvoted 2 times

...

sausageman

11 months ago

Selected Answer: C

C. Invoke the incident response plan. All others can be part of the incident response plan

upvoted 1 times

...

1899f17

1 year, 1 month ago

PREVENT ACESS TO THE APPLICATION

upvoted 1 times

...