CompTIA CASP+ (CAS-003) — Question 18

A recent assessment identified that several users' mobile devices are running outdated versions of endpoint security software that do not meet the company's security policy. Which of the following should be performed to ensure the users can access the network and meet the company's security requirements?

Answer options

• A. Vulnerability assessment
• B. Risk assessment
• C. Patch management
• D. Device quarantine
• E. Incident management

Correct answer: C

Explanation

The correct answer is C, Patch management, as it involves updating the security software on devices to meet the necessary security standards. The other options, such as vulnerability assessment and risk assessment, do not directly address the need to update software, while device quarantine and incident management focus on containment and response rather than compliance.