Câu 13: CS0-004: CompTIA CySA+ V4

A Chief Information Security Officer (CISO) evaluates a threat heat map and notices a substantial increase in custom scanning and enumeration activities. The CISO wants to gather as much information as possible about the activities targeting the company to help prioritize mitigations. Which of the following solutions is the best way to accomplish this goal?

1. A. Configuring a honeypot in a separate environment to gather attacker techniques — đáp án hiện tại
2. B. Leveraging canary tokens on all production systems to detect valid intrusion attempts
3. C. Subscribing to information-sharing and threat intelligence reports for the industry
4. D. Implementing a web application firewall in front of all applications and having it log attacks