CAS-005 · Question #39
Company A acquired Company В and needs to determine how the acquisition will impact the attack surface of the organization as a whole. Which of the following is the best way to achieve this goal?…
The correct answer is B. Documenting third-party connections used by Company B F. Performing an architectural review of Company B's network. To determine how the acquisition of Company B will impact the attack surface, the following steps Documenting third-party connections used by Company B: Understanding all external connections is essential for assessing potential entry points for attackers and ensuring that…
Question
Company A acquired Company В and needs to determine how the acquisition will impact the attack surface of the organization as a whole. Which of the following is the best way to achieve this goal? (Choose two.)
Options
- AImplementing DLP controls preventing sensitive data from leaving Company B's network
- BDocumenting third-party connections used by Company B
- CReviewing the privacy policies currently adopted by Company B
- DRequiring data sensitivity labeling tor all files shared with Company B
- EForcing a password reset requiring more stringent passwords for users on Company B's network
- FPerforming an architectural review of Company B's network
How the community answered
(35 responses)- A6% (2)
- B51% (18)
- C14% (5)
- D26% (9)
- E3% (1)
Explanation
To determine how the acquisition of Company B will impact the attack surface, the following steps Documenting third-party connections used by Company B: Understanding all external connections is essential for assessing potential entry points for attackers and ensuring that these connections are secure. Performing an architectural review of Company B's network: This review will identify vulnerabilities and assess the security posture of the acquired company's network, providing a comprehensive understanding of the new attack surface. These actions will provide a clear picture of the security implications of the acquisition and help in developing a plan to mitigate any identified risks.
Community Discussion
No community discussion yet for this question.