Certified Chief Information Security Officer (CCISO) — Question 133

Which of the following functions evaluates patches used to close software vulnerabilities and perform validation of new systems to assure compliance with security?

Answer options

• A. Incident response
• B. Risk management
• C. System security administration
• D. System testing

Correct answer: C

Explanation

The correct answer is C, System security administration, as it involves managing and validating security measures, including patching systems. Incident response deals with reacting to security incidents, risk management focuses on identifying and mitigating risks, and system testing centers on evaluating system functionality rather than security compliance.