CompTIA CASP+ Practice Test

Which statement best rephrases the system notification requirement for security incidents?

1. The system shall generate alerts post-incident

2. The system shall throw an error on specified incidents

3. The system shall log all incidents for review

4. The system shall send emails to admins

The correct answer is: The system shall throw an error on specified incidents

The best rephrasing of the system notification requirement for security incidents focuses on the immediate response to specified incidents. In this context, requiring the system to throw an error on specific incidents implies that there is a predefined expectation of certain types of events or errors that need to be captured and communicated in real-time as they occur. This can help in quickly identifying issues and responding to them effectively. While logging all incidents for review is a vital function, it does not equate to a proactive notification. Similarly, generating alerts post-incident fails to address the immediate importance of notifying relevant stakeholders about issues as they develop. Sending emails to admins is certainly a form of notification, but it may not encompass all forms of immediate alerts necessary beyond just email communication. By specifying that the system throws an error on certain incidents, it ensures clarity and urgency in addressing security incidents as they present themselves.