Isaca Certified in Risk and Information Systems Control CRISC Question # 368 Topic 37 Discussion
CRISC Exam Topic 37 Question 368 Discussion:
Question #: 368
Topic #: 37
A company has recently acquired a customer relationship management (CRM) application from a certified software vendor. Which of the following will BE ST help lo prevent technical vulnerabilities from being exploded?
A.
implement code reviews and Quality assurance on a regular basis
B.
Verity me software agreement indemnifies the company from losses
C.
Review the source coda and error reporting of the application
D.
Update the software with the latest patches and updates
The best way to prevent technical vulnerabilities from being exploited is to update the software with the latest patches and updates. Patches and updates are software modifications that fix the known bugs, errors, or flaws in the software. They also improve the performance, functionality, and security of the software. By updating the software with the latest patches and updates, the company can reduce the exposure and likelihood of the technical vulnerabilities, and protect the software from potential attacks or exploits. The other options are not as effective as updating the software with the latest patches and updates, as they are related to the quality assurance, legal protection, or error handling of the software, not the prevention or mitigation of the technical vulnerabilities. References = Risk and Information Systems Control Study Manual, Chapter 3: IT Risk Response, Section 3.3: IT Risk Response Implementation, page 145.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit