Câu 279: CISA: Certified Information Systems Auditor

An IS auditor finds that a key Internet-facing system is vulnerable to attack and that patches are not available. What should the auditor recommend be doneFIRST?

1. A. Implement additional firewalls to protect the system.
2. B. Decommission the server.
3. C. Implement a new system that can be patched.
4. D. Evaluate the associated risk. — đáp án hiện tại