According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

Question

Options

• ASusceptibility to attack, mitigation response time, and cost
• BAttack vectors, controls cost, and investigation staffing needs
• CVulnerability exploitation, attack recovery, and mean time to repair
• DSusceptibility to attack, expected duration of attack, and mitigation availability

• A
  77% (20)
• B
  4% (1)
• C
  15% (4)
• D
  4% (1)

No community discussion yet for this question.