A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)
A) incident response playbooks
B) asset vulnerability assessment
C) report of staff members with asset relations
D) key assets and executives
E) malware analysis report

Question

Quizplus · Accepted Answer

To calculate a risk assessment according to NIST, you need to understand the vulnerabilities of the assets (B) and have an analysis of the malware to understand its potential impact (E).

A New Malware Variant Is Discovered Hidden in Pirated Software