CompTIA CASP+ Practice Test

To increase security levels after a malware outbreak, which action should the security manager prioritize?

1. Update anti-virus definitions regularly

2. Conduct a vulnerability assessment of the standard image

3. Install additional software firewalls on all systems

4. Train employees on phishing attacks

The correct answer is: Conduct a vulnerability assessment of the standard image

Conducting a vulnerability assessment of the standard image is a critical step following a malware outbreak. This process helps identify weaknesses in the system that may have contributed to the infection. By evaluating the standard image, which is essentially the baseline configuration of systems within the organization, the security manager can uncover misconfigurations, outdated software, and potential entry points that attackers might exploit in the future. The results of the vulnerability assessment provide actionable insights for remediation, helping to ensure that systems are reinforced against similar incidents. It allows the organization to not only address current vulnerabilities but also to implement best practices in system configuration, patch management, and security policies. While updating anti-virus definitions is important for ongoing protection, it doesn't address underlying vulnerabilities that may exist. Installing additional software firewalls can add layers of protection but may not resolve specific vulnerabilities present in the system configurations. Training employees on phishing attacks is essential for user education but does not directly mitigate technical vulnerabilities that may lead to a malware outbreak.