A manufacturing company's security engineer is concerned a remote actor may be able to access the ICS that is used to monitor the factory lines. The security engineer recently proposed some techniques to reduce the attack surface of the ICS to the Chief Information Security Officer (CISO). Which of the following would
BEST track the reductions to show the CISO the engineer's plan is successful during each phase?

A. Conducting tabletop exercises to evaluate system risk

B. Contracting a third-party auditor after the project is finished

C. Performing pre- and post-implementation penetration tests

D. Running frequent vulnerability scans during the project








 

Suggested Answer: A

Community Answer: C



This question is in CAS-003 CompTIA Advanced Security Practitioner (CASP+) Exam
For getting CompTIA Advanced Security Practitioner (CASP+) Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by CompTIA. 
Trademarks, certification & product names are used for reference only and belong to CompTIA.
The website does not contain actual questions and answers from CompTIA's Certification Exams.