nerdexam
CompTIA

CAS-002 · Question #777

A member of the software development team has requested advice from the security team to implement a new secure lab for testing malware. Which of the following is the NEXT step that the security…

The correct answer is D. Create a proposal and present it to management for approval. Before implementing a new secure malware lab, the security team must obtain management approval through a formal proposal, as this is the required governance step before any resources are committed.

Enterprise Security

Question

A member of the software development team has requested advice from the security team to implement a new secure lab for testing malware. Which of the following is the NEXT step that the security team should take?

Options

  • APurchase new hardware to keep the malware isolated.
  • BDevelop a policy to outline what will be required in the secure lab.
  • CConstruct a series of VMs to host the malware environment.
  • DCreate a proposal and present it to management for approval.

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    6% (2)
  • D
    89% (32)

Why each option

Before implementing a new secure malware lab, the security team must obtain management approval through a formal proposal, as this is the required governance step before any resources are committed.

APurchase new hardware to keep the malware isolated.

Purchasing hardware before receiving management approval commits company resources without authorization, bypassing the required governance and budget approval process.

BDevelop a policy to outline what will be required in the secure lab.

Developing a policy before obtaining management approval presupposes the project will be approved and wastes effort if the proposal is rejected or scoped differently.

CConstruct a series of VMs to host the malware environment.

Constructing VMs before presenting a proposal skips the authorization stage and may result in unauthorized use of infrastructure or rework if requirements change.

DCreate a proposal and present it to management for approval.Correct

Creating and presenting a proposal to management is the correct next step because any significant new infrastructure initiative requires formal authorization before resources, budget, or design work are committed. This follows standard change management and project governance principles, ensuring scope, cost, and risk are reviewed at the appropriate level before any technical or procurement work begins.

Concept tested: Change management approval process for new security infrastructure

Topics

#malware lab#project approval#security governance#lab design

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice