A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization. Which of the following should be the analyst's FIRST action?
A.
Create a full inventory of information and data assets.
B.
Ascertain the impact of an attack on the availability of crucial resources.
C.
Determine which security compliance standards should be followed.
D.
Perform a full system penetration test to determine the vulnerabilities.
Why A is the Best Answer:
✔ You can’t protect what you don’t know exists – Creating an inventory of information and data assets is the first step in risk assessment.
✔ Understanding assets allows proper risk prioritization – Some assets are more critical than others (e.g., customer PII vs. public marketing materials).
âś” A strong asset inventory helps in compliance, security planning, and risk mitigation.
CIS Control 1 : Hardware and Software Inventory
you can't defend or protect when you don't know what you have.
Source:
Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)
I would say C is the answer because in order to know which assets are important you have to know what framework/guidelines the company has to follow. for e.g. the risks of a financial org may be different from thos of a hospitol
) Determine which security compliance standards should be followed
Compliance is critical, but you must first identify assets before determining applicable regulations (e.g., HIPAA for healthcare, PCI-DSS for payment data).
You might and probably would do a vulnerability assessment with multiple security compliance standards in mind. but to do it you first need an inventory.
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.CAS-004 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
RevZig67
Highly Voted 2Â years, 11Â months agoblacksheep6r
Most Recent 2Â months, 2Â weeks agoServerBrain
9Â months, 2Â weeks agoBiteSize
1Â year, 9Â months agoCosmic_robot
2Â years agoAndre876
2Â years, 5Â months agoblacksheep6r
2Â months, 2Â weeks agoAndre876
2Â years, 4Â months agoBoats
2Â years, 8Â months ago