Certified in Risk and Information Systems Control (CRISC) — Question 1029

Which of the following is the BEST indication of a potential threat?

Answer options

• A. Excessive activity in system logs
• B. Increase in identified system vulnerabilities
• C. Excessive policy and standard exceptions
• D. Ineffective risk treatment plans

Correct answer: A

Explanation

Excessive activity in system logs often indicates unusual or suspicious behavior, which can be a sign of a potential threat. While an increase in system vulnerabilities and exceptions to policies may suggest weaknesses, they do not directly indicate active threats like abnormal log activity does. Ineffective risk treatment plans can contribute to overall security issues but are not a direct indicator of a current threat.