Study. uk . com
  1. Home
  2. All questions
  3. Question 70

CISSP study material · question 70 of 500

An agency tracks the CISA Known Exploited Vulnerabilities catalog. Two vulnerabilities were added to the listing on the same day; one record is flagged as requiring forensic triage under Binding Operational Directive 26-04 and the other carries no such flag. How does that flag affect the two remediation deadlines?

  1. The flagged record receives double the usual window so that evidence can be collected before patching
  2. Both records share the catalog's single standard deadline, and the flag only requires a forensic report afterwards
  3. The flagged record is due about three days after it was added, while the unflagged one has roughly a fortnight
  4. The flagged record's deadline is suspended until the forensic examination of the affected systems concludes
Show the answer

Answer: C. The flagged record is due about three days after it was added, while the unflagged one has roughly a fortnight

Every entry carries its own due date, and the forensic triage flag drives urgency: flagged entries were given three days from addition, unflagged ones typically around two weeks.

Source: CISA Known Exploited Vulnerabilities Catalog (CISA) — Known Exploited Vulnerabilities Catalog > entry fields (Forensic triage required per BOD-26-04)

Challenge yourself on this topic → Study as cards