CompTIA CAS-005 Exam - Topic 1 Question 7 Discussion

Actual exam question for CompTIA's CAS-005 exam

Question #: 7
Topic #: 1

[All CAS-005 Questions]

Which of the following is the security engineer most likely doing?

AAssessing log in activities using geolocation to tune impossible Travel rate alerts

BReporting on remote log-in activities to track team metrics

CThreat hunting for suspicious activity from an insider threat

DBaselining user behavior to support advanced analytics

Show Suggested Answer

Suggested Answer: A

In the given scenario, the security engineer is likely examining login activities and their associated geolocations. This type of analysis is aimed at identifying unusual login patterns that might indicate an impossible travel scenario. An impossible travel scenario is when a single user account logs in from geographically distant locations in a short time, which is physically impossible. By assessing login activities using geolocation, the engineer can tune alerts to identify and respond to potential security breaches more effectively.

by Domonique at Dec 08, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CAS-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kimbery

3 months ago

Surprised no one mentioned A first, it's super relevant!

upvoted 0 times

...

Aja

3 months ago

D? Really? I doubt that's the main focus here.

upvoted 0 times

...

Zita

3 months ago

B seems plausible too, tracking metrics is important for teams.

upvoted 0 times

...

Cherri

4 months ago

I think it's more about C, insider threats are a big deal!

upvoted 0 times

...

Thad

4 months ago

Definitely A, geolocation is key for impossible travel alerts.

upvoted 0 times

...

Jamal

4 months ago

I feel like reporting on remote log-in activities is more about metrics than security, so I would lean towards option A or C.

upvoted 0 times

...

Frederick

4 months ago

Baselining user behavior sounds familiar, but I can't recall if it's specifically related to advanced analytics or something else.

upvoted 0 times

...

Soledad

4 months ago

I remember practicing a question about insider threats, so I feel like option C could be relevant here.

upvoted 0 times

...

Dacia

5 months ago

I think the security engineer might be assessing log in activities with geolocation, but I'm not entirely sure if that's the main focus.

upvoted 0 times

...

Truman

5 months ago

I'm a bit confused by this question. The options all seem plausible, but I'm not sure which one is the most likely scenario. I'll need to review my notes on security monitoring and analytics to make an informed decision.

upvoted 0 times

...

Hassie

5 months ago

Okay, I've got this. The security engineer is most likely assessing login activities using geolocation to tune impossible travel rate alerts. That's a common security monitoring practice to detect potential account compromises.

upvoted 0 times

...

Blossom

5 months ago

Hmm, this is a tricky one. I'm not entirely sure which option is the most likely scenario. I'll need to think through the details of each choice and try to determine the best fit.

upvoted 0 times

...

Mohammad

5 months ago

This question seems to be testing my understanding of security monitoring and analytics. I'll need to carefully consider the different options and think about the security engineer's likely goals and activities.

upvoted 0 times

...

Cristal

1 year ago

If I were a security engineer, I'd be tempted to just go with option D and call it a day. Baselining is like painting a target on the wall and letting the bad guys have their fun.

upvoted 0 times

...