CompTIA CySA+ (CS0-003) — Question 471

A new cybersecurity analyst is tasked with creating an executive briefing on possible threats to the organization. Which of the following will produce the data needed for the briefing?

Answer options

• A. Firewall logs
• B. Indicators of compromise
• C. Risk assessment
• D. Access control lists

Correct answer: C

Explanation

The correct answer is C, as a risk assessment evaluates potential threats and vulnerabilities, providing detailed data that is essential for an executive briefing. Firewall logs and indicators of compromise (options A and B) offer insights into specific incidents but do not present a comprehensive overview of organizational risks. Access control lists (option D) are related to user permissions and do not directly contribute to understanding overall threats.