Isaca
CISM · Question #545
For vulnerabilities classified as high or critical, which of the following vulnerability characteristics is MOST important to consider when prioritizing remediation actions?
The correct answer is D. Exploitability. Exploitability directly measures how easily an attacker can leverage the vulnerability; high or critical flaws that are readily exploitable pose the greatest immediate risk and should be remediated first.
Submitted by jian89· Apr 18, 2026Information Security Risk Management
Question
For vulnerabilities classified as high or critical, which of the following vulnerability characteristics is MOST important to consider when prioritizing remediation actions?
Options
- ANumber of devices affected
- BTime since initial detection
- CEffort required to mitigate
- DExploitability
How the community answered
(50 responses)- A6% (3)
- B2% (1)
- C12% (6)
- D80% (40)
Explanation
Exploitability directly measures how easily an attacker can leverage the vulnerability; high or critical flaws that are readily exploitable pose the greatest immediate risk and should be remediated first.
Topics
#Vulnerability Prioritization#Risk Assessment#Exploitability
Community Discussion
No community discussion yet for this question.