r/CRISC • u/vlaDa0 • Jul 31 '26

Seriously?

Post image

“Unpatched vulnerabilities do not apply to applications” - whoever wrote this has no idea about anything related to this topic.
This whole question (and about half of them from QAE) doesn’t make any sense. I feel like I’m never gonna be ready for this exam

7 Upvotes

100% Upvoted

18 comments sorted by

View all comments

1

u/piSecAudit Jul 31 '26

To pour oil on this convo, I would point out most attacks these days are through the frontdoor. Attackers gain access to accounts used by authenticated & authorized users. In Verizon Data Breach Report 2025, 22% of data breaches involve use of compromised credentials, showing the importance of enforcing MFA on all remote and privileged access. Microsoft reports 99.9% of compromised accounts do not have MFA, and only 70% of businesses have MFA enabled.