200-201 Question 384
Select 4A SOC analyst is tasked with automating the process of checking for vulnerabilities in endpoint systems. They decide to create a script that runs a vulnerability scanner every night and sends an email report to the team. Which of the following tasks should the analyst prioritize to successfully implement this automation?
- A
Schedule the script to run at a specific time using a task scheduler.
- B
Test the script manually to ensure it executes as expected before automating.
- C
Ensure the script has appropriate permissions to access necessary resources.
- D
Install endpoint protection software to block malware during script execution.
- E
Document the process for future team members to understand and maintain the automation.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To successfully automate the task of running a vulnerability scanner and sending email reports, it is essential to schedule the task, test the script for proper functionality, ensure permissions are correctly set, and document the process for maintainability. These steps ensure the automation is reliable, secure, and maintainable by the team. Installing endpoint protection software, while important for general security, is not a required step for this specific task.
- A. Correct.
Correct. Scheduling the script to run at a specific time is crucial for automation, as it ensures the task is executed consistently without manual intervention.
- B. Correct.
Correct. Testing the script manually first helps identify and resolve any errors, ensuring the automation works as expected before scheduling.
- C. Correct.
Correct. The script must have the necessary permissions to access resources like the vulnerability scanner and email server, or it will fail to execute properly.
- D. Incorrect.
Incorrect. While endpoint protection software is important for security, it is not directly related to the automation of running the script for vulnerability scanning.
- E. Correct.
Correct. Documenting the process ensures that other team members can understand, troubleshoot, or modify the automation in the future if needed.