nerdexam
CompTIA

CAS-001 · Question #220

Statement: "The system shall implement measures to notify system administrators prior to a security incident occurring." Which of the following BEST restates the above statement to allow it to be…

The correct answer is D. The system shall throw an error when specified incidents pass a configurable threshold. The original requirement asks for proactive, pre-incident notification - alerting administrators before a full security incident materializes. Option D ('throw an error when specified incidents pass a configurable threshold') captures both critical elements: the system monitors…

Integration of Computing, Communications and Business Disciplines

Question

Statement: "The system shall implement measures to notify system administrators prior to a security incident occurring." Which of the following BEST restates the above statement to allow it to be implemented by a team of software developers?

Options

  • AThe system shall cease processing data when certain configurable events occur.
  • BThe system shall continue processing in the event of an error and email the security administrator
  • CThe system shall halt on error.
  • DThe system shall throw an error when specified incidents pass a configurable threshold.

How the community answered

(27 responses)
  • A
    11% (3)
  • B
    19% (5)
  • C
    4% (1)
  • D
    67% (18)

Explanation

The original requirement asks for proactive, pre-incident notification - alerting administrators before a full security incident materializes. Option D ('throw an error when specified incidents pass a configurable threshold') captures both critical elements: the system monitors for warning signs and alerts (throws an error/notification) when a configurable threshold is crossed, which is before a full incident occurs. This is actionable and implementable by developers. Option A (cease processing) is a response action, not a notification. Option B describes post-error notification, not pre-incident warning. Option C ('halt on error') is a reaction, not a proactive alert with a configurable threshold.

Topics

#security requirements#requirements translation#alerting thresholds#software development

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice