Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA CAS-005 Exam - Topic 1 Question 7 Discussion

Which of the following is the security engineer most likely doing?
A) Assessing log in activities using geolocation to tune impossible Travel rate alerts
B) Reporting on remote log-in activities to track team metrics
C) Threat hunting for suspicious activity from an insider threat
D) Baselining user behavior to support advanced analytics

CompTIA CAS-005 Exam - Topic 1 Question 7 Discussion

Actual exam question for CompTIA's CAS-005 exam
Question #: 7
Topic #: 1
[All CAS-005 Questions]

Which of the following is the security engineer most likely doing?

Show Suggested Answer Hide Answer
Suggested Answer: A

In the given scenario, the security engineer is likely examining login activities and their associated geolocations. This type of analysis is aimed at identifying unusual login patterns that might indicate an impossible travel scenario. An impossible travel scenario is when a single user account logs in from geographically distant locations in a short time, which is physically impossible. By assessing login activities using geolocation, the engineer can tune alerts to identify and respond to potential security breaches more effectively.


by Domonique at Dec 08, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CAS-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Kimbery
7 months ago
Surprised no one mentioned A first, it's super relevant!
upvoted 0 times
...
Aja
8 months ago
D? Really? I doubt that's the main focus here.
upvoted 0 times
...
Zita
8 months ago
B seems plausible too, tracking metrics is important for teams.
upvoted 0 times
...
Cherri
8 months ago
I think it's more about C, insider threats are a big deal!
upvoted 0 times
...
Thad
8 months ago
Definitely A, geolocation is key for impossible travel alerts.
upvoted 0 times
...
Jamal
9 months ago
I feel like reporting on remote log-in activities is more about metrics than security, so I would lean towards option A or C.
upvoted 0 times
...
Frederick
9 months ago
Baselining user behavior sounds familiar, but I can't recall if it's specifically related to advanced analytics or something else.
upvoted 0 times
...
Soledad
9 months ago
I remember practicing a question about insider threats, so I feel like option C could be relevant here.
upvoted 0 times
...
Dacia
9 months ago
I think the security engineer might be assessing log in activities with geolocation, but I'm not entirely sure if that's the main focus.
upvoted 0 times
...
Truman
9 months ago
I'm a bit confused by this question. The options all seem plausible, but I'm not sure which one is the most likely scenario. I'll need to review my notes on security monitoring and analytics to make an informed decision.
upvoted 0 times
...
Hassie
9 months ago
Okay, I've got this. The security engineer is most likely assessing login activities using geolocation to tune impossible travel rate alerts. That's a common security monitoring practice to detect potential account compromises.
upvoted 0 times
...
Blossom
9 months ago
Hmm, this is a tricky one. I'm not entirely sure which option is the most likely scenario. I'll need to think through the details of each choice and try to determine the best fit.
upvoted 0 times
...
Mohammad
9 months ago
This question seems to be testing my understanding of security monitoring and analytics. I'll need to carefully consider the different options and think about the security engineer's likely goals and activities.
upvoted 0 times
...
Cristal
2 years ago
If I were a security engineer, I'd be tempted to just go with option D and call it a day. Baselining is like painting a target on the wall and letting the bad guys have their fun.
upvoted 0 times
...
Eileen
2 years ago
Option A, gotta love those impossible travel rate alerts! Keeps the hackers on their toes.
upvoted 0 times
...
Leonida
2 years ago
Reporting on remote login activities, as in option B, sounds more like a management task than a security engineer's job.
upvoted 0 times
Cristy
1 year ago
D) Baselining user behavior to support advanced analytics
upvoted 0 times
...
Lonna
1 year ago
C) Threat hunting for suspicious activity from an insider threat
upvoted 0 times
...
Ona
1 year ago
A) Assessing log in activities using geolocation to tune impossible Travel rate alerts
upvoted 0 times
...
...
Carmela
2 years ago
Baselining user behavior is important for detecting anomalies in the system.
upvoted 0 times
...
Larae
2 years ago
Threat hunting for insider threats, as in option C, is a common security engineer's responsibility.
upvoted 0 times
...
Cherilyn
2 years ago
I'd go with option D. Baselining user behavior is crucial for behavioral analytics and detecting anomalies.
upvoted 0 times
Cherry
1 year ago
Baselining user behavior is definitely crucial for behavioral analytics. Option D is the way to go.
upvoted 0 times
...
Dominga
1 year ago
I agree, option D is important for detecting anomalies and supporting advanced analytics.
upvoted 0 times
...
Harris
1 year ago
Option D seems like the best choice. Baselining user behavior is key for advanced analytics.
upvoted 0 times
...
...
Paola
2 years ago
I believe the security engineer could also be baselining user behavior to support advanced analytics.
upvoted 0 times
...
Merissa
2 years ago
Option A seems the most appropriate for a security engineer. Geolocation-based monitoring can help detect suspicious login attempts.
upvoted 0 times
Ernestine
2 years ago
C) Threat hunting for suspicious activity from an insider threat
upvoted 0 times
...
Sheridan
2 years ago
A) Assessing log in activities using geolocation to tune impossible Travel rate alerts
upvoted 0 times
...
...
Leota
2 years ago
I agree with Lasandra, threat hunting is crucial to prevent insider threats.
upvoted 0 times
...
Lasandra
2 years ago
I think the security engineer is threat hunting for suspicious activity from an insider threat.
upvoted 0 times
...

Save Cancel