Question

An organization is deploying a new system to the production environment. A security analyst discovers the system is not properly hardened or patched. Which of the following BEST describes the scenario?
A. A secure baseline was not established early in the process.
B. User acceptance testing was not completed.
C. Integrity checks were not conducted to ensure it was the correct system.
D. An application code error was introduced during the development phase.

Answer 1

Answer:

The best answer is A) A secure baseline was not established early in the process.

Explanation:

If the organization is deploying to the production environment and the security analyst discovers this risk at this point, then a secure baseline was not established, because it is impossible to successfully pass the coding and peer review instances by programmers and testing instances by the QA team without any warning to correct this problem.