Threat and Vulnerability Management ACCISO Practice Questions (Page 10)

Questions 46–47

1. 46expert · hard

   A security operations team receives a threat intelligence feed that includes a large number of indicators of compromise (IOCs) related to a new malware campaign. The team has limited time to process the feed. Which approach is most effective for integrating this intelligence into the vulnerability management process?

   • AManually review each IOC and decide whether to block it.
   • BAutomatically import the IOCs into the SIEM and endpoint detection tools, and prioritize alerts based on the relevance to the organization's environment.
   • CIgnore the feed because it is likely not relevant to the organization.
   • DBlock all IOCs without any prioritization or testing.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   In a risk matrix used for vulnerability prioritization, which combination of factors determines the overall risk rating of a vulnerability?

   • AConfidentiality and integrity
   • BThreat and vulnerability
   • CCost and time
   • DLikelihood and impact
   Reveal Solution Discussion Select an answer first