A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the expense of hiring outside consultants, the testing must be performed using in-house or cheaply available resource. There cannot be a possibility of any requirement being damaged in the test. Which of the following has the administrator been tasked to perform?

Question

Accepted Answer

D. Vulnerability assessment A vulnerability assessment systematically identifies, quantifies, and ranks security weaknesses in a system or network through non-intrusive methods. This process allows for the discovery and reporting of actual flaws and weaknesses without exploiting them, thus ensuring no possibility of equipment damage while using internal resources to establish a security baseline.

Answer

A. Risk transference Risk transference is a risk management strategy involving shifting the financial or operational burden of a potential risk to another party, rather than a method for assessing system flaws.

Answer

B. Penetration test A penetration test involves actively attempting to exploit vulnerabilities to simulate a real attack, which inherently carries a risk of disrupting or damaging systems, contradicting the requirement that no equipment can be harmed.

Answer

C. Threat assessment A threat assessment primarily focuses on identifying potential threats and their characteristics, and how they might impact an organization, rather than specifically discovering existing technical flaws and weaknesses within the infrastructure itself.

A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and…

Question

Options

How the community answered

Why each option

Topics

Community Discussion