CAS-001 · Question #2
A security analyst at Company A has been trying to convince the Information Security Officer (ISO) to allocate budget towards the purchase of a new intrusion prevention system (IPS) capable of…
The correct answer is A. Emerging threat reports B. Company attack tends. To justify a budget allocation for a new security tool, the analyst must demonstrate both the existence of credible threats and the organization's specific exposure to them. Emerging threat reports (A) establish that encrypted traffic inspection is becoming a necessity by…
Question
A security analyst at Company A has been trying to convince the Information Security Officer (ISO) to allocate budget towards the purchase of a new intrusion prevention system (IPS) capable of analyzing encrypted web transactions. Which of the following should the analyst provide to the ISO to support the request? (Select TWO).
Options
- AEmerging threat reports
- BCompany attack tends
- CRequest for Quote (RFQ)
- DBest practices
- ENew technologies report
How the community answered
(17 responses)- A76% (13)
- C6% (1)
- D6% (1)
- E12% (2)
Explanation
To justify a budget allocation for a new security tool, the analyst must demonstrate both the existence of credible threats and the organization's specific exposure to them. Emerging threat reports (A) establish that encrypted traffic inspection is becoming a necessity by highlighting how adversaries increasingly use HTTPS to evade detection. Company attack trends (B) provide concrete, organization-specific evidence of past incidents or attempted attacks, making the business case directly relevant to leadership. An RFQ (C) is a procurement document used after the decision to buy, not a justification tool. Best practices (D) are general guidance and lack the urgency of real threat data. A new technologies report (E) describes what exists on the market but does not argue why the company specifically needs it now.
Topics
Community Discussion
No community discussion yet for this question.