CompTIA CASP+ (CAS-004) — Question 192

An analyst has prepared several possible solutions to a successful attack on the company. The solutions need to be implemented with the LEAST amount of downtime. Which of the following should the analyst perform?

Answer options

• A. Implement all the solutions at once in a virtual lab and then run the attack simulation. Collect the metrics and then choose the best solution based on the metrics.
• B. Implement every solution one at a time in a virtual lab, running a metric collection each time. After the collection, run the attack simulation, roll back each solution, and then implement the next. Choose the best solution based on the best metrics.
• C. Implement every solution one at a time in a virtual lab, running an attack simulation each time while collecting metrics. Roll back each solution and then implement the next. Choose the best solution based on the best metrics.
• D. Implement all the solutions at once in a virtual lab and then collect the metrics. After collection, run the attack simulation. Choose the best solution based on the best metrics.

Correct answer: C

Explanation

The correct answer is C because it allows for testing each solution individually with an attack simulation, ensuring that metrics are collected effectively for decision-making. Options A and D both implement solutions simultaneously, which could lead to confusion in metrics due to overlapping effects. Option B, while methodical, could lead to increased downtime as each remedy is rolled back before testing the next one.