Instant Access CuramSoftware.CS0-003.v2025-06-04.q180 Actual Practice Test Engine for Free (Page 30)

Question 141

Which of the following should be updated after a lessons-learned review?

A.Disaster recovery plan
B.Business continuity plan
C.Tabletop exercise
D.Incident response plan

Question 142

Which of the following responsibilities does the legal team have during an incident management event? (Select two).

A.Coordinate additional or temporary staffing for recovery efforts.
B.Review and approve new contracts acquired as a result of an event.
C.Advise the Incident response team on matters related to regulatory reporting.
D.Ensure all system security devices and procedures are in place.
E.Conduct computer and network damage assessments for insurance.
F.Verify that all security personnel have the appropriate clearances.

Question 143

Which of the following is the most important factor to ensure accurate incident response reporting?

A.A well-defined timeline of the events
B.A guideline for regulatory reporting
C.Logs from the impacted system
D.A well-developed executive summary

Question 144

A security analyst observed the following activity from a privileged account:
. Accessing emails and sensitive information
. Audit logs being modified
. Abnormal log-in times
Which of the following best describes the observed activity?

A.Irregular peer-to-peer communication
B.Unauthorized privileges
C.Rogue devices on the network
D.Insider attack

Question 145

Which of the following characteristics ensures the security of an automated information system is the most effective and economical?

A.Originally designed to provide necessary security
B.Subjected to intense security testing
C.Customized to meet specific security threats
D.Optimized prior to the addition of security

Correct Answer: A

Comprehensive Detailed
The most effective and economical way to ensure the security of an automated information system is to design it with security in mind from the outset. This is often referred to as "security by design." Here's a breakdown of each option and why option A is correct:
A . Originally designed to provide necessary security
Systems designed with security from the beginning integrate secure practices and considerations during the development process. This approach mitigates the need for costly and complex retroactive security implementations, which are common in systems where security was an afterthought.
Cost Efficiency: Security implementations at the design stage can be embedded into the system architecture, reducing the costs associated with later modifications.
Effectiveness: Security-by-design approaches often result in robust systems that are more resilient to vulnerabilities because they address security concerns at each development phase.
B . Subjected to intense security testing
While rigorous security testing (such as penetration testing and vulnerability assessments) is essential, it is reactive. Security testing is more effective when applied to systems already designed with foundational security principles, ensuring that tests identify potential flaws in an inherently secure system.
C . Customized to meet specific security threats
Customizing security to meet specific threats addresses unique risks, but such a targeted approach may miss new or emerging threats not initially considered. It also risks neglecting fundamental security practices that apply universally, leading to potential vulnerabilities.
D . Optimized prior to the addition of security
Optimizing a system before adding security features may enhance performance but does not guarantee security. Security cannot be effectively added onto a system as an afterthought without incurring additional costs or creating potential weaknesses.
Reference:
NIST SP 800-160: Systems Security Engineering, which emphasizes designing systems with security integrated from the beginning.
OWASP Security by Design Principles: Explores how security considerations are most effective when included early in development.

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File