CompTIA CASP+ Practice Test

What proactive measure can a company implement to prevent vulnerabilities in its payment system?

1. Routine code reviews.

2. Regular updates to the firewall.

3. Security awareness training for staff.

4. Investment in penetration testing.

The correct answer is: Investment in penetration testing.

Implementing investment in penetration testing is an effective proactive measure for preventing vulnerabilities in a payment system. Penetration testing simulates real-world attacks to identify security weaknesses before they can be exploited by malicious actors. By regularly conducting these tests, a company can uncover vulnerabilities that may not be identified through code reviews or regular audits. This allows the organization to address potential security loopholes and strengthen its overall defense strategy, particularly in sensitive areas such as payment systems, where security is paramount. In contrast, while code reviews and firewall updates are important aspects of security maintenance, they may not comprehensively identify how an attacker could exploit vulnerabilities in a live environment. Security awareness training is valuable for ensuring that staff are informed about potential threats and best practices, but it does not directly address the technical vulnerabilities present in the system's architecture or code. Therefore, investing in penetration testing provides a targeted and practical approach to discovering and mitigating risks within the payment system.