CAS-004 practice question 18 of 35

A technology company developed an in-house chat application that is used only by developers. An open-source library within the application has been deprecated. The facts below are provided: The cost of replacing this system is nominal. The system provides no revenue to the business. The system is not a critical part of the business. Which of the following is the best risk mitigation strategy?

Full set: 610 questions
Answer options
A: Transfer the risk, since developers prefer using this chat application over alternatives.
B: Accept the risk, since any system disruption will only impact developers.
C: Avoid the risk by shutting down this application and migrating to another chat platform. Correct answer
D: Mitigate the risk by purchasing an EDR and configuring network ACLs.
Correct Answer:
C. Avoid the risk by shutting down this application and migrating to another chat platform.
Explanation

Shutting down and migrating to another platform is the most cost-effective and practical option. This avoids risks associated with the deprecated library. This aligns with CASP+ objective 1.3, which emphasizes practical risk mitigation strategies.

Scroll to Top