CompTIA CASP+ (CAS-003) — Question 56

A company has adopted and established a continuous-monitoring capability, which has proven to be effective in vulnerability management, diagnostics, and mitigation. The company wants to increase the likelihood that it is able to discover and therefore respond to emerging threats earlier in the life cycle.
Which of the following methodologies would BEST help the company to meet this objective? (Choose two.)

Answer options

• A. Install and configure an IPS.
• B. Enforce routine GPO reviews.
• C. Form and deploy a hunt team.
• D. Institute heuristic anomaly detection.
• E. Use a protocol analyzer with appropriate connectors.

Correct answer: C, D

Explanation

The correct answers, C and D, focus on proactive threat detection strategies. A hunt team actively seeks out threats that may not be detected by traditional security measures, while heuristic anomaly detection identifies unusual patterns that could signify emerging threats. Options A, B, and E are valuable but do not directly address the need for early threat discovery.