CompTIA CASP+ (CAS-004) — Question 241

A security analyst has been tasked with providing key information in the risk register. Which of the following outputs or results would be used to BEST provide the information needed to determine the security posture for a risk decision? (Choose two.)

Answer options

• A. Password cracker
• B. SCAP scanner
• C. Network traffic analyzer
• D. Vulnerability scanner
• E. Port scanner
• F. Protocol analyzer

Correct answer: B, D

Explanation

The SCAP scanner (B) and vulnerability scanner (D) are both effective tools for assessing security vulnerabilities and compliance with security policies, making them crucial for determining the security posture. The other options, while useful in their own contexts, do not provide the comprehensive risk assessment data needed for effective decision-making.