CompTIA CASP+ Exam: CAS-003 VDI Security Strategy

Developing a Sustainable Security Strategy for VDIs

Question

A company is transitioning to a new VDI environment, and a system engineer is responsible for developing a sustainable security strategy for the VDIs.

Which of the following is the MOST appropriate order of steps to be taken?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

When developing a sustainable security strategy for a VDI environment, it is essential to follow a structured approach. The order of steps to be taken should be logical and efficient, as each step should build upon the previous one to ensure that the VDI environment is secure.

Let's examine each option and determine the most appropriate order of steps:

Option A: Firmware update, OS patching, HIDS, antivirus, baseline, monitoring agent This order of steps is not the most appropriate because starting with a firmware update is not typically the best first step in securing a VDI environment. Firmware updates can be time-consuming and can cause compatibility issues with other software. A better approach would be to start with patching the operating system (OS) since this is a more straightforward and effective step. The order of the other steps is appropriate, but the initial step should be changed.

Option B: OS patching, baseline, HIDS, antivirus, monitoring agent, firmware update This order of steps is a better approach since patching the OS is an important first step in securing the VDI environment. The baseline step is also crucial since it establishes a secure configuration for the VDIs, which will serve as a foundation for other security measures. The order of the remaining steps is appropriate, with firmware updates as the final step.

Option C: Firmware update, OS patching, HIDS, antivirus, monitoring agent, baseline Starting with a firmware update is not the best approach, as it can cause compatibility issues with other software and can be time-consuming. Patching the OS is a more appropriate first step. The order of the remaining steps is correct, with baseline as the final step.

Option D: Baseline, antivirus, OS patching, monitoring agent, HIDS, firmware update. Starting with a baseline is a good approach since it establishes a secure configuration for the VDIs. However, antivirus software should be installed before patching the OS to protect against known vulnerabilities. The order of the remaining steps is correct, with firmware updates as the final step.

Therefore, Option B is the most appropriate order of steps to be taken.