Study. uk . com
  1. Home
  2. All questions
  3. Question 762

CISM study material · question 762 of 1000

An endpoint is found to have missing patches and unauthorised software. Which handling does the Community Profile recommend?

  1. Isolating the affected device permanently from the network until it has been rebuilt
  2. Redirecting it to a remediation environment before access is authorised
  3. Allowing the access to continue while a ticket is raised for the remediation work
  4. Blocking the user's account entirely until the affected device has been fully rebuilt again
Show the answer

Answer: B. Redirecting it to a remediation environment before access is authorised

SP 800-61r3 recommends monitoring endpoints for cyber health issues such as missing patches, malware infections or unauthorised software, and redirecting endpoints with issues to a remediation environment before access is authorised.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.CM-09.R5

Challenge yourself on this topic → Study as cards