CompTIA Advanced Security Practitioner (CASP+) CAS-004

The phase that establishes the identification and prioritization of critical systems and functions within an organization is the business impact analysis (BIA). Conducting a BIA involves assessing the potential impacts of disruptions to these systems and functions, which helps an organization prioritize its recovery efforts. This is a key component of business continuity planning (BCP) as it ensures that the most critical aspects of the business are identified and addressed first.

Traditional methods of addressing risk may not be possible in the cloud because specific risks cannot always be transferred to the cloud provider. In a cloud environment, there is a shared responsibility model where the cloud service provider handles certain aspects like the security of the infrastructure, while the organization remains responsible for securing its own data, applications, and access controls. Therefore, specific risks related to the organization's data and operations cannot be fully transferred to the cloud provider and remain the responsibility of the organization.

To resolve an LDAP injection vulnerability, the best actions are Conducting input sanitization and Deploying a Web Application Firewall (WAF). Conducting input sanitization ensures that user inputs are validated and cleaned to remove any characters that could be used to manipulate LDAP queries maliciously. This process helps prevent the injection of malicious code. Deploying a WAF provides a protective layer that monitors, filters, and blocks harmful HTTP/S traffic, including malicious inputs that may attempt LDAP injection attacks. Together, these measures offer a robust defense against such vulnerabilities.

To address the company's issues, the best solution involves three main actions: Serving static content via distributed CDNs reduces latency by providing local access to content for international users. Creating a read replica of the central database and pulling reports from it minimizes the load on the central database during report processing, thus preventing inventory issues when placing orders. Auto-scaling API servers based on performance ensures that additional servers are automatically added during peak times to distribute the load evenly across all servers, preventing overloads.

To identify any unauthorized individuals who enter the storage room by following an authorized employee, it is best to monitor camera footage corresponding to a valid access request. This allows the company to review the video footage whenever someone enters the storage room using their card reader, enabling the identification of any unauthorized individuals who may have entered in close proximity to an authorized employee. This method is targeted and efficient in identifying potential security breaches without additional manual processes or inconveniencing authorized personnel.