CAS-003 · Question #313
A new cluster of virtual servers has been set up in a lab environment and must be audited before being allowed on the production network. The security manager needs to ensure unnecessary services…
The correct answer is B. SCAP scanner F. SIEM. A SCAP (Security Content Automation Protocol) scanner automates the auditing of security configurations against established benchmarks (such as CIS or NIST baselines). It can verify which services are running, flag those that should be disabled, and assess system account…
Question
A new cluster of virtual servers has been set up in a lab environment and must be audited before being allowed on the production network. The security manager needs to ensure unnecessary services are disabled and all system accounts are using strong credentials. Which of the following tools should be used? (Choose two.)
Options
- AFuzzer
- BSCAP scanner
- CPacket analyzer
- DPassword cracker
- ENetwork enumerator
- FSIEM
How the community answered
(31 responses)- A3% (1)
- B81% (25)
- D10% (3)
- E6% (2)
Explanation
A SCAP (Security Content Automation Protocol) scanner automates the auditing of security configurations against established benchmarks (such as CIS or NIST baselines). It can verify which services are running, flag those that should be disabled, and assess system account configurations-directly addressing both audit requirements. A SIEM (Security Information and Event Management) system aggregates and correlates log data from the virtual cluster, giving the security manager visibility into authentication events, service activity, and anomalies that may indicate weak credentials or misconfigured services. Together, SCAP provides configuration compliance validation while SIEM provides behavioral and log-based assurance before the cluster is promoted to production. A fuzzer (A) tests application inputs. A packet analyzer (C) captures traffic. A network enumerator (E) discovers hosts and open ports but does not assess configuration compliance.
Topics
Community Discussion
No community discussion yet for this question.