Exam CAS-003 topic 1 question 202 discussion

Actual exam question from CompTIA's CAS-003

Question #: 202
Topic #: 1

Following a recent data breach, a company has hired a new Chief Information Security Officer (CISO). The CISO is very concerned about the response time to the previous breach and wishes to know how the security team expects to react to a future attack. Which of the following is the BEST method to achieve this goal while minimizing disruption?

A. Perform a black box assessment
B. Hire an external red team audit
C. Conduct a tabletop exercise.
D. Recreate the previous breach.
E. Conduct an external vulnerability assessment.

Show Suggested Answer

Suggested Answer: C 🗳️

by D1960 at Nov. 22, 2020, 6:18 p.m.

Comments

Submit Cancel

Neo2020

Highly Voted 4 years, 5 months ago

C. A tabletop exercise is an. activity in which key personnel assigned emergency management roles and responsibilities are gathered to discuss, in a non-threatening environment, various simulated emergency situations. So you can know as CISO how are they going to react and minimum disruption.

upvoted 5 times

...

Trap_D0_r

Most Recent 4 years, 5 months ago

It's C.

upvoted 2 times

...

D1960

4 years, 8 months ago

Maybe: B. Hire an external red team audit ? If the employees knew when the audit would take place, it would not disrupt operations. And external team could be more knowledgeable, and more objective, than an in-house team. An outside team probably does this all the time. There is no indication that the in-house staff has ever done this.

upvoted 2 times

...