IsacaIsaca
CISM · Question #321
CISM Question #321: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #321. The question stem and answer options stay visible for context.
Submitted by haruto_sh· Apr 18, 2026Information Security Incident Management
Question
During a post-incident review, it was determined that a known vulnerability was exploited in order to gain access to a system. The vulnerability was patched as part of the remediation on the offending system. Which of the following should be done NEXT?
Options
- AReview the vulnerability management process.
- BInstall patches on all existing systems.
- CScan to determine whether the vulnerability is present on other systems.
- DReport the root cause of the vulnerability to senior management
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident Response#Vulnerability Management#Post-Incident Review#Remediation