Câu 23: CCP: Certified CMMC Professional

When assessing SI.L2-3.14.6: Monitor communications for attack, the CCA interviews the person responsible for the intrusion detection system and examines relevant policies and procedures for monitoring organizational systems. What would be a possible next step the CCA could conduct to gather sufficient evidence?

1. A. Conduct a penetration test.
2. B. Interview the intrusion detection system’s supplier.
3. C. Upload known malicious code and observe the system response.
4. D. Review an artifact to check key references for the configuration of the IDS or IPS practice for additional guidance on intrusion detection and prevention systems. — đáp án hiện tại