Exam CAS-003 topic 1 question 88 discussion

Actual exam question from CompTIA's CAS-003

Question #: 88
Topic #: 1

A threat advisory alert was just emailed to the IT security staff. The alert references specific types of host operating systems that can allow an unauthorized person to access files on a system remotely. A fix was recently published, but it requires a recent endpoint protection engine to be installed prior to running the fix.
Which of the following MOST likely need to be configured to ensure the system are mitigated accordingly? (Choose two.)

A. Antivirus
B. HIPS
C. Application whitelisting
D. Patch management
E. Group policy implementation
F. Firmware updates

Show Suggested Answer

Suggested Answer: AD 🗳️

by D1960 at May 31, 2021, 10:20 p.m.

Comments

Submit Cancel

tirajvid

1 year, 5 months ago

Selected Answer: DE

Guys it says "The alert references specific types of host operating systems" D. Patch management is obvious. However to target specific group of machines to deploy the patch , you need to implement group policy. So im leaning towards : E. Group policy implementation

upvoted 1 times

...

arawaco

3 years, 8 months ago

A and D. D patch management is given by the statement «... A fix was recently published» so the question is what EDR could help? From the answer's pool, an antivirus. F not, becasue the questions say opetaing system.

upvoted 2 times

...

destro

3 years, 11 months ago

I agree with the below, patch management is a given, but firmware updates is my best bet for the other one.

upvoted 4 times

...

D1960

4 years, 1 month ago

Maybe: D. Patch management and F. Firmware updates ? Before you try to install a fix, make sure you are installing the fix on the latest firmware, and that the system is fully patched. This only makes sense.

upvoted 4 times

...