An Organization Used a Third Party to Conduct a Security

question 14

Multiple Choice

An organization used a third party to conduct a security audit and discovered several deficiencies in the cybersecurity program. The findings noted many external vulnerabilities that were not caught by the vulnerability scanning software, numerous weaknesses that allowed lateral movement, and gaps in monitoring that did not detect the activity of the auditors. Based on these findings, which of the following would be the BEST long-term enhancement to the security program?

• A) Quarterly external penetration testing
• B) Monthly tabletop scenarios
• C) Red-team exercises
• D) Audit exercises

---

Definitions:

Small Claims Court

A specialized court that handles disputes involving relatively small financial amounts, simplifying the legal process.

Youth Court

A specialized court designed to handle cases involving minors, focusing on rehabilitation rather than punishment.

Superior Court

A type of state or provincial court in some jurisdictions that has general jurisdiction over civil and criminal cases.

Criminal Matters

Legal issues that involve violations of criminal law, which governs offenses against the state or public order.