CAS-003 · Question #119
A new internal network segmentation solution will be implemented into the enterprise that consists of 200 internal firewalls. As part of running a pilot exercise, it was determined that it takes…
The correct answer is D. Review to determine if control effectiveness is in line with the complexity of the solution. Checking whether control effectiveness complies with the complexity of the solution and then determining if there is not an alternative simpler solution would be the first procedure to follow in the light of the findings.
Question
A new internal network segmentation solution will be implemented into the enterprise that consists of 200 internal firewalls. As part of running a pilot exercise, it was determined that it takes three changes to deploy a new application onto the network before it is operational. Security now has a significant effect on overall availability. Which of the following would be the FIRST process to perform as a result of these findings?
Options
- ALower the SLA to a more tolerable level and perform a risk assessment to see if the solution
- BPerform a cost benefit analysis and implement the solution as it stands as long as the risks are
- CEngage internal auditors to perform a review of the project to determine why and how the project
- DReview to determine if control effectiveness is in line with the complexity of the solution.
How the community answered
(40 responses)- A8% (3)
- B13% (5)
- C23% (9)
- D57% (23)
Explanation
Checking whether control effectiveness complies with the complexity of the solution and then determining if there is not an alternative simpler solution would be the first procedure to follow in the light of the findings.
Topics
Community Discussion
No community discussion yet for this question.