Explain How Security Controls Are Continually Tested and Gaps Are Remediated. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Why is business impact an important factor when prioritizing remediation of security gaps?

   • ABecause business impact is the only factor that matters in any remediation plan
   • BBecause business impact determines the exact cost of fixing the gap
   • CBecause a gap affecting a critical business function can cause significant operational and financial damage
   • DBecause business impact is used to assign blame to the department that owns the affected system
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is tracking remediation of a high-severity finding. The fix has been deployed, but the vulnerability scan still shows the finding as open. The team suspects the scan is using outdated vulnerability signatures. What is the most appropriate action?

   • AIgnore the scan result and rely on the change request as proof.
   • BUpdate the vulnerability scanner's signatures and re-run the scan.
   • CClose the finding because the fix was deployed.
   • DRe-deploy the fix without investigating the scan result.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   What is the primary purpose of identifying gaps in security controls based on testing results?

   • ATo assign blame to the team responsible for the failed control
   • BTo understand where the organization is exposed to risk so that remediation efforts can be prioritized
   • CTo document that testing was performed for compliance purposes only
   • DTo automatically fix all identified vulnerabilities without human intervention
   Reveal Solution Discussion Select an answer first