To Prepare for an Upcoming Audit, the Chief Information Security

question 315

Multiple Choice

To prepare for an upcoming audit, the Chief Information Security Officer (CISO) asks for all 1200 vulnerabilities on production servers to be remediated. The security engineer must determine which vulnerabilities represent real threats that can be exploited so resources can be prioritized to migrate the most dangerous risks. The CISO wants the security engineer to act in the same manner as would an external threat, while using vulnerability scan results to prioritize any actions. Which of the following approaches is described?

• A) Blue team
• B) Red team
• C) Black box
• D) White team

---

Definitions:

Subordinated Debt

A class of debt which ranks below other debts with regard to claims on assets or earnings.

Priority of Repayment

A hierarchy or order in which obligations and debts are to be paid, particularly relevant in bankruptcies and when liquidating assets.

Bond Indenture

A legal document specifying the terms and conditions under which a bond is issued.

Sinking Fund

A Sinking Fund is a fund established by an issuer of a bond to repay the principal amount of the bond at maturity, usually by setting aside funds over a period of time.