A Security Manager Has Asked an Analyst to Provide Feedback

question 122

Multiple Choice

A security manager has asked an analyst to provide feedback on the results of a penetration test. After reviewing the results, the manager requests information regarding the possible exploitation of vulnerabilities. Which of the following information data points would be MOST useful for the analyst to provide to the security manager, who would then communicate the risk factors to senior management? (Choose two.)

• A) Probability
• B) Adversary capability
• C) Attack vector
• D) Impact
• E) Classification
• F) Indicators of compromise

---

Definitions:

Parliamentary Procedure

A set of rules for conduct at meetings that allows everyone to be heard and to make decisions without confusion.

Roberts' Rules Of Order

A widely used manual of parliamentary procedure that governs the conduct of meetings in many organizations.

Groupthink

Groupthink refers to a psychological phenomenon where the desire for harmony and conformity within a group results in an irrational or dysfunctional decision-making outcome.

Nominal Group

A technique used in group decision-making that involves individuals generating ideas independently before sharing and discussing them collectively.