Câu 167: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A company recently acquired a SaaS provider and needs to integrate its platform into the company's existing infrastructure without impact to the customer's experience. The SaaS provider does not have a mature security program. A recent vulnerability scan of the SaaS provider's systems shows multiple critical vulnerabilities attributed to very old and outdated OSs. Which of the following solutions would prevent these vulnerabilities from being introduced into the company's existing infrastructure?

1. A. Segment the systems to reduce the attack surface if an attack occurs.
2. B. Migrate the services to new systems with a supported and patched OS. — đáp án hiện tại
3. C. Patch the systems to the latest versions of the existing OSs.
4. D. Install anti-malware, HIPS, and host-based firewalls on each of the systems.