A Newly Hired Chief Information Security Officer (CISO) Wants to Understand

question 368

Multiple Choice

A newly hired Chief Information Security Officer (CISO) wants to understand how the organization's CIRT handles issues brought to their attention, but needs to be very cautious about impacting any systems. The MOST appropriate method to use would be:

• A) an internal vulnerability assessment.
• B) a red-team threat-hunt exercise.
• C) a white-box penetration test.
• D) a guided tabletop exercise.

---

Definitions:

Camouflage

A method or pattern used by animals and military forces to blend with their environment to conceal themselves from predators or enemies.

Ambush

A surprise attack by people lying in wait in a concealed position.

Positive Feedback Loop

A process that occurs in a system where the output enhances or amplifies the initial condition, leading to an increase in the effect.

Co-operation

The process of groups or entities working together towards a common goal, often leading to mutual benefit or success.