CompTIA CAS-005 Exam - Topic 3 Question 23 Discussion

Actual exam question for CompTIA's CAS-005 exam

Question #: 23
Topic #: 3

A company discovers intellectual property data on commonly known collaboration web applications that allow the use of slide templates. The systems administrator is reviewing the configurations of each tool to determine how to prevent this issue. The following security solutions are deployed:

CASB

SASE

WAF

EDR

Firewall

IDS

SIEM

DLP endpoints

Which of the following should the administrator do to address the issue?

AEnable blocking for all WAF policies.

BEnforce a policy to block unauthorized web applications within CASB.

CCreate an alert within the SIEM for outgoing network traffic to the suspected website.

DConfigure DLP endpoints to block sensitive data to removable storage.

Show Suggested Answer

Suggested Answer: B, B

by Kaycee at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CAS-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Clorinda

3 days ago

Haha, the admin better not forget to update the firewall rules. Can't have those slide templates slipping through!

upvoted 0 times

...

Ligia

9 days ago

D) DLP endpoints can also help, but blocking data to removable storage might not be enough on its own.

upvoted 0 times

...

Jacqueline

14 days ago

C) Creating a SIEM alert for suspicious network traffic is a good idea too. Gotta keep an eye on those connections.

upvoted 0 times

...

Theron

19 days ago

B) Looks like the best option to address the issue. CASB can block unauthorized web apps and prevent data leaks.

upvoted 0 times

...

Lorean

24 days ago

I feel like DLP is more about preventing data loss rather than blocking unauthorized apps, so I'm leaning towards option B as the best approach.

upvoted 0 times

...

Oren

29 days ago

I practiced a similar question where SIEM alerts were crucial for monitoring traffic, so option C could be relevant here too.

upvoted 0 times

...

Joesph

1 month ago

I'm not entirely sure, but I think enabling WAF policies might not be enough if the data is already being shared through those apps.

upvoted 0 times

...

Catrice

1 month ago

I remember we discussed the importance of CASB in controlling unauthorized applications, so option B seems like a strong choice.

upvoted 0 times

...

Quentin

1 month ago

Hmm, I'm not sure if creating an alert in the SIEM is the best approach here. That might just flag the issue after the fact, rather than actually preventing the data from being shared in the first place. I'd lean more towards the CASB or WAF options.

upvoted 0 times

...

Royce

2 months ago

I think the key here is to focus on the CASB and prevent unauthorized web applications from being used. That seems like the most direct way to address the root cause of the problem. I'd go with option B.

upvoted 0 times

...

Telma

2 months ago

Okay, I think I've got it now. The CASB seems like the best solution to enforce a policy and block unauthorized web applications. That way, we can proactively prevent the data from being shared, rather than just reacting to it after the fact. I'm going to go with option B.

upvoted 0 times

...

Yaeko

2 months ago

Hmm, this seems like a tricky one. I'd probably start by looking at the CASB and WAF solutions, since they seem most directly related to the issue of unauthorized web applications.

upvoted 0 times

...