In CRC practice, which statement differentiates mitigation from remediation?

In CRC practice, which statement differentiates mitigation from remediation?

• A. Mitigation reduces risk during an incident; remediation addresses underlying vulnerabilities and returns systems to a secure state
• B. Mitigation addresses root cause; remediation reduces risk during an incident
• C. Mitigation reduces risk during an incident; remediation addresses and fixes underlying vulnerabilities and returns systems to a secure state
• D. Mitigation and remediation are interchangeable

Answer: (C)

Mitigation is about reducing risk during an incident by putting controls in place to limit damage and prevent escalation. Remediation is about fixing the underlying vulnerabilities and restoring systems to a secure, stable state after an issue is found or after an incident is contained. The best statement cleanly separates these ideas: mitigation lowers risk during an incident, while remediation addresses and fixes the root problems and returns systems to a secure state. For example, during an active breach you might segment networks and enhance monitoring to limit impact (mitigation). After discovering a vulnerability, you would patch, reconfigure, remove any backdoors, and verify security to bring the system back to a secure state (remediation). Saying mitigation addresses root causes or that the two are interchangeable mixes up their distinct roles.

Mitigation is about reducing risk during an incident by putting controls in place to limit damage and prevent escalation. Remediation is about fixing the underlying vulnerabilities and restoring systems to a secure, stable state after an issue is found or after an incident is contained. The best statement cleanly separates these ideas: mitigation lowers risk during an incident, while remediation addresses and fixes the root problems and returns systems to a secure state. For example, during an active breach you might segment networks and enhance monitoring to limit impact (mitigation). After discovering a vulnerability, you would patch, reconfigure, remove any backdoors, and verify security to bring the system back to a secure state (remediation). Saying mitigation addresses root causes or that the two are interchangeable mixes up their distinct roles.