Exam SY0-401 topic 1 question 183 discussion

Actual exam question from CompTIA's SY0-401

Question #: 183
Topic #: 1

An overseas branch office within a company has many more technical and non-technical security incidents than other parts of the company. Which of the following management controls should be introduced to the branch office to improve their state of security?

A. Initial baseline configuration snapshots
B. Firewall, IPS and network segmentation
C. Event log analysis and incident response
D. Continuous security monitoring processes

Show Suggested Answer

Suggested Answer: D 🗳️
Continuous monitoring may involve regular measurements of network traffic levels, routine evaluations for regulatory compliance, and checks of network security device configurations. It also points toward the never-ending review of what resources a user actually accesses, which is critical for preventing insider threats.
Incorrect Options:
A: An initial baseline configuration snapshot would allow for the standardized minimal level of security that all systems in an organization must comply with to be enforced. This will not cover the non-technical security incidents.
B: A Firewall, IPS and network segmentation will offer technical protection, but not non-technical security protection.
C: Event log analysis and incident response will not cover the non-technical security incidents.
References:

by slackbot at July 27, 2024, 11:54 a.m.

Comments

Submit Cancel

slackbot

1 year ago

monitoring on its own will NOT improve security

upvoted 1 times

...