The company decides to release the application without remediating the high-risk vulnerabilities.
Which of the following is the MOST likely reason for the company to release the application?

A. The company does not believe the security vulnerabilities to be real

B. The company lacks the tools to perform a vulnerability assessment

C. The company lacks a risk management process

D. The company has a high risk tolerance








 

Suggested Answer: D






This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.