Free ISO-27005-RM Web TestEngine Demo

Q9 Single choice

Email filtering is operating, but users can still reach a fake sign-in page and remote access lacks multifactor authentication. Which statement correctly describes the risk factors?

A
The missing authentication control is the threat, and phishing is the vulnerability.
B
Email filtering removes the vulnerability, so no residual risk needs analysis.
C
The vulnerability alone produces harm without any threat event or consequence.
D
Phishing may exploit the weakness, while filtering may reduce but not eliminate likelihood.

ISO-27005-RM Web TestEngine demo