CISM Certified Information Security Manager – Question0901

The PRIMARY purpose of vulnerability assessments is to:

A.
determine the impact of potential threats.
B. test intrusion detection systems (IDS) and response procedures.
C. provide clear evidence that the system is sufficiently secure.
D. detect deficiencies that could lead to a system compromise.

Correct Answer: D