CompTIA Cybersecurity Analyst (CySA+): CS0-003

The steering committee for information security management annually reviews the security incident register for the organization to look for trends and systematic issues. The steering committee wants to rank the risks based on past incidents to improve the security program for next year. Below is the incident register for the organization:

Which of the following should the organization consider investing in first due to the potential impact of availability?

A. Hire a managed service provider to help with vulnerability management.

B. Build a warm site in case of system outages.

C. Invest in a failover and redundant system, as necessary.

D. Hire additional staff for the IT department to assist with vulnerability management and log review.

A manufacturing company has joined the information sharing and analysis center for its sector. As a benefit, the company will receive structured IoC data contributed by other members. Which of the following best describes the utility of this data?

A. Other members will have visibility into instances of positive IoC identification within the manufacturing company's corporate network.

B. The manufacturing company will have access to relevant malware samples from all other manufacturing sector members.

C. Other members will automatically adjust their security postures to defend the manufacturing company's processes.

D. The manufacturing company can ingest the data and use tools to autogenerate security configurations for all of its infrastructure.

Each time a vulnerability assessment team shares the regular report with other teams, inconsistencies regarding versions and patches in the existing infrastructure are discovered. Which of the following is the best solution to decrease the inconsistencies?

A. Implementing credentialed scanning

B. Changing from a passive to an active scanning approach

C. Implementing a central place to manage IT assets

D. Performing agentless scanning