Certified Information Security Manager (CISM) — Question 752

Which of the following security processes will BEST prevent the exploitation of system vulnerabilities?

Answer options

• A. Antivirus software
• B. Log monitoring
• C. Intrusion detection
• D. Patch management

Correct answer: D

Explanation

Patch management is the most effective method because it involves regularly updating software to fix known vulnerabilities, thereby reducing the risk of exploitation. While antivirus software, log monitoring, and intrusion detection play important roles in security, they do not specifically address the underlying vulnerabilities like patch management does.