Question

An organization has employed the services of an auditing firm to perform a gap assessment in preparation for upcoming audit. As part of the gap assessment, the auditor supporting the assessment recommends the organization engage with other industry partners to share information about emerging attacks to organizations in the industry in which the organization functions. Which of the following types of information could be drawn from such participation? an A. Threat modeling B. Risk assessment C. Vulnerability data D. Threat intelligence E. Risk metrics F. Exploit frameworks

Answer 1

Answer F Exploit frameworks Explanation Various framework contains capabilities for detect and analysed for emerging attacks happen in the industry can be improved The vendors of these software packages has continues adding to the exploits process platforms Security process and malicious actors can use the tools to detect and exploit the vulnerabilities process In this report has analysts and identifying the vulnerability of detect the organisation