An organization wants to create a threat model to identity vulnerabilities in its infrastructure. Which of the following, should be prioritized first?

Question

Options

• AExternal-facing Infrastructure with known exploited vulnerabilities
• BInternal infrastructure with high-seventy and Known exploited vulnerabilities
• CExternal facing Infrastructure with a low risk score and no known exploited vulnerabilities
• DExternal-facing infrastructure with a high risk score that can only be exploited with local access to

• A
  64% (16)
• B
  20% (5)
• C
  12% (3)
• D
  4% (1)

Explanation

External-facing infrastructure with known exploited vulnerabilities poses the highest immediate risk, as it is directly accessible to attackers and already associated with active threats. This should be the top priority in any threat modeling effort.

No community discussion yet for this question.