Skip to content

FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector

A bank tests its resilience using a threat-led penetration test in which ethical hackers mimic real attacker tactics against live production systems of critical functions. What is the main advantage of this method over a standard vulnerability scan?

Threat-led penetration testing emulates realistic attackers against live critical systems, testing people, processes and technology together. This reveals detection and response gaps that automated vulnerability scans miss. It does not guarantee zero vulnerabilities or replace incident response planning.

  1. AIt replaces the need for incident response plans
  2. BIt guarantees that no vulnerabilities remain after remediation
  3. CIt eliminates third-party risk because testers cover vendor systems automatically
  4. DIt tests the people, processes and technology against realistic attack scenarios, revealing weaknesses in detection and response that automated scans missCorrect

Explanation

Threat-led testing emulates real adversaries across people, process and technology, exposing gaps in detection and response. Scans only identify known technical weaknesses. No test guarantees zero vulnerabilities or replaces response planning.

Did you get it right without looking?

One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.

Practise Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial SectorFree diagnostic mock

More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions