CompTIA CySA+ (CS0-001) — Question 179

A nuclear facility manager determined the need to monitor utilization of water within the facility. A startup company just announced a state-of-the-art solution to address the need for integrating the business and ICS network. The solution requires a very small agent to be installed on the ICS equipment. Which of the following is the MOST important security control for the manager to invest in to protect the facility?

Answer options

• A. Run a penetration test on the installed agent.
• B. Require that the solution provider make the agent source code available for analysis.
• C. Require thorough guides for administrator and users.
• D. Install the agent for a week on a test system and monitor the activities.

Correct answer: D

Explanation

Installing the agent on a test system for a week allows the manager to monitor its activities and identify any potential security issues before full deployment. This proactive approach is essential for ensuring that the agent does not introduce vulnerabilities to the ICS environment. The other options, while valuable, do not provide the same level of immediate oversight and risk assessment as real-world testing.