nerdexam
CompTIA

CAS-003 · Question #463

A security administrator is updating a company's SCADA authentication system with a new application. To ensure interoperability between the legacy system and the new application, which of the…

The correct answer is D. Incident response coordinator F. Compliance manager. The Incident Response Coordinator (D) and Compliance Manager (F) are the two most critical stakeholders for a SCADA authentication deployment. SCADA systems in critical infrastructure are subject to strict regulatory frameworks (e.g., NERC CIP for energy, ICS-CERT guidelines)…

Technical Integration of Enterprise Security

Question

A security administrator is updating a company's SCADA authentication system with a new application. To ensure interoperability between the legacy system and the new application, which of the following stakeholders should be involved in the configuration process before deployment? (Choose two.)

Options

  • ANetwork engineer
  • BService desk personnel
  • CHuman resources administrator
  • DIncident response coordinator
  • EFacilities manager
  • FCompliance manager

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    3% (1)
  • C
    9% (3)
  • D
    71% (25)
  • E
    3% (1)

Explanation

The Incident Response Coordinator (D) and Compliance Manager (F) are the two most critical stakeholders for a SCADA authentication deployment. SCADA systems in critical infrastructure are subject to strict regulatory frameworks (e.g., NERC CIP for energy, ICS-CERT guidelines). The Compliance Manager must verify that the new authentication configuration satisfies all applicable regulatory requirements before the system goes live. The Incident Response Coordinator must be involved to ensure that IR runbooks, detection procedures, and escalation paths are updated to reflect the new authentication system and its potential failure modes or attack vectors. Network engineers handle infrastructure configuration but are not governance stakeholders for compliance and IR readiness.

Topics

#SCADA security#ICS authentication#stakeholder management#legacy systems

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice