CSSLP · Question #18
The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step includ
The correct answer is B. Cost-benefit examination of countermeasures C. Identification of vulnerabilities D. Assessment of attacks. The risk assessment step of the LeGrand Vulnerability-Oriented Risk Management method includes identifying vulnerabilities, assessing attacks, and performing a cost-benefit examination of countermeasures.
Question
The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply.
Options
- ARemediation of a particular vulnerability
- BCost-benefit examination of countermeasures
- CIdentification of vulnerabilities
- DAssessment of attacks
How the community answered
(39 responses)- A13% (5)
- B87% (34)
Why each option
The risk assessment step of the LeGrand Vulnerability-Oriented Risk Management method includes identifying vulnerabilities, assessing attacks, and performing a cost-benefit examination of countermeasures.
Remediation of a particular vulnerability is a risk treatment or mitigation step that occurs after the risk assessment phase, not as part of the assessment itself.
A cost-benefit examination of countermeasures is an integral part of risk assessment, as it helps prioritize which vulnerabilities to address based on the effectiveness and cost of available solutions.
Identification of vulnerabilities is a foundational element of any risk assessment process, as understanding weaknesses is crucial for determining potential risks.
Assessment of attacks involves evaluating the likelihood and potential impact of threats exploiting identified vulnerabilities, which is a key component of determining overall risk.
Concept tested: LeGrand risk management method steps
Topics
Community Discussion
No community discussion yet for this question.