Question:Which of the following statements regarding threats and vulnerabilities in information security is NOT correct?

PECB ISO-IEC-27001-Lead-Auditor Question Answer

Question:

Which of the following statements regarding threats and vulnerabilities in information security is NOT correct?

Vulnerabilities can be intrinsic or extrinsic, related to the characteristics of the asset or to external factors

Threats must exploit a vulnerability to have a negative impact on the confidentiality, integrity, and/or availability of information

All vulnerabilities require immediate implementation of controls regardless of corresponding threats

ISO-IEC-27001-Lead-Auditor PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"