Which of the following should the new security administrator review to gain more information?

A networking administrator was recently promoted to security administrator in an organization that handles highly sensitive data. The Chief Information Security Officer (CISO) has just asked for all IT security personnel to review a zero-day vulnerability and exploit for specific application servers to help mitigate the organization’s exposure to that risk.

Which of the following should the new security administrator review to gain more information? (Choose three.)
A . CVE database
B . Recent security industry conferences
C . Security vendor pages
D . Known vendor threat models
E . Secure routing metrics
F . Server’s vendor documentation
G . Verified security forums
H . NetFlow analytics

View Answer

Answer: B,D,G