exam questions

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 1459 discussion

Actual exam question from Isaca's CRISC
Question #: 1459
Topic #: 1
[All CRISC Questions]

Which of the following processes BEST enables a risk practitioner to gather evidence about the threat environment for further analysis?

  • A. Risk assessment
  • B. Threat modeling
  • C. Vulnerability scanning
  • D. Threat intelligence
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Kennethlim79
1 month, 1 week ago
Selected Answer: D
D. Threat intelligence. Threat intelligence involves the collection, evaluation, and analysis of information about existing and emerging threats. This process is specifically designed to provide insights into the threat landscape, helping organizations understand the nature, capabilities, intentions, and actions of potential adversaries. It enables the identification of potential threats, their tactics, techniques, and procedures (TTPs), and helps in making informed decisions to enhance security posture. While risk assessment, threat modeling, and vulnerability scanning are valuable for understanding and managing risks, threat intelligence is more focused on the continuous gathering and analysis of information specifically about threats.
upvoted 2 times
...
eblue
3 months, 1 week ago
D. Threat Intelligence is the right anwer
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago