CompTIA CAS-005 Exam - Topic 1 Question 36 Discussion

Question

A company developed a new solution that needs to track any changes to the data, and the changes need to be quickly identified. If any changes are attempted without prior approval, multiple events must be triggered, such as:

Raising alerts

Blocking the unapproved changes

Quickly removing access to the data

Which of the following solutions best meets these requirements?

Georgeanna · Accepted Answer

B) Implementing a file integrity monitoring tool and integrating it via orchestration and automation with other security tools

Georgeanna · Answer

A) Tracking all application logs, integrating them to the existing SIEM, flagging any changes, and making them visible on security dashboards

Georgeanna · Answer

C) Introducing more granular access controls and allowing read-only access for non-privileged users

Georgeanna · Answer

D) Configuring CASB rules, making access to the data available only to authorized personnel