To validate local system-hardening requirements, which of the following types of vulnerability scans would work BEST to verify the scanned device meets security policies?

To validate local system-hardening requirements, which of the following types of vulnerability scans would work BEST to verify the scanned device meets security policies?
A . SCAP
B. SAST
C. DAST
D. DACS

View Answer

Answer: A

Explanation:

SCAP is a protocol designed to assess the security compliance of computers and other devices. It works by scanning systems against security policies, and can help verify that the scanned device meets security requirements. Here is a link to the CompTIA CySA+ Guide’s Chapter 5 – Access Controls for more information: https://certification.comptia.org/docs/default-source/exam-objectives/cs0-002.pdf