Free Preparation Discussions
MENU
CompTIA CAS-005 Exam Questions
Free CompTIA CAS-005 Exam Actual Questions
Note: Premium Questions for CAS-005 were last updated On Oct. 10, 2026 (see below)
A global organization is reviewing potential vendors to outsource a critical payroll function. Each vendor's plan includes using local resources in multiple regions to ensure compliance with all regulations. The organization's Chief Information Security Officer is conducting a risk assessment on the potential outsourcing vendors' subprocessors. Which of the following best explains the need for this risk assessment?
Per SecurityX CAS-005 GRC principles, outsourcing a function does not transfer accountability for protecting personally identifiable information (PII). While subprocessors handle data, the originating organization remains responsible under most data protection laws and frameworks (e.g., GDPR, CCPA).
Due care in procurement (option B) is important, but it is a supporting concept, not the primary driver in this context.
Jurisdictional compliance (option D) is a requirement, but the underlying reason for risk assessment is that accountability for PII protection remains with the organization.
In order to follow new regulations, the Chief Information Security Officer plans to use a defense-in-depth approach for a perimeter network. Which of the following protections would best achieve this goal?
A company implements an Al model that handles sensitive and personally identifiable information. Which of the following threats is most likely the company's primary concern?
A security architect is mitigating a vulnerability that previously led to a web application data breach. An analysis into the root cause of the issue finds the following:
An administrator's account was hijacked and used on several Autonomous System Numbers within 30 minutes.
All administrators use named accounts that require multifactor authentication.
Single sign-on is used for all company applications.Which of the following should the security architect do to mitigate the issue?
The hijacked administrator account was used across multiple ASNs (indicating different network locations) in a short time, despite MFA and SSO. This suggests a stolen session or token misuse. Let's analyze:
A . Token theft detection with lockouts:Useful for detecting stolen SSO tokens, but it's reactive and may not prevent initial misuse across networks.
B . Context-based authentication:This adds real-time checks (e.g., geolocation, IP changes) to verify login attempts. Given the rapid ASN changes, this proactively mitigates the issue by challenging suspicious logins, aligning with CAS-005's focus on adaptive security.
C . Decentralize accounts:This removes SSO, increasing complexity and weakening MFA enforcement, which isn't practical or secure.
A cybersecurity architect is reviewing the detection and monitoring capabilities for a global company that recently made multiple acquisitions. The architect discovers that the acquired companies use different vendors for detection and monitoring The architect's goal is to:
* Create a collection of use cases to help detect known threats
* Include those use cases in a centralized library for use across all of the companies
Which of the following is the best way to achieve this goal?
To create a collection of use cases for detecting known threats and include them in a centralized library for use across multiple companies withdifferent vendors, Sigma rules are the best option. Here's why:
Centralized Rule Management: By using Sigma rules, the cybersecurity architect can create a centralized library of detection rules that can be easily shared and implemented across different detection and monitoring systems used by the acquired companies. This ensures consistency in threat detection capabilities.
Ease of Use and Flexibility: Sigma provides a structured and straightforward format for defining detection logic. It allows for the easy creation, modification, and sharing of rules, facilitating collaboration and standardization across the organization.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Christopher Wright
8 days agoAngela Rodriguez
20 days agoSarah Flores
29 days agoEmma Perez
1 month agoAngela Martinez
2 months agoEdward Murphy
2 months agoBrian White
2 months agoLisa Murphy
3 months agoKimberly Garcia
3 months agoJessica Nguyen
3 months agoJustin Morgan
4 months agoAnthony Phillips
4 months agoGary King
4 months agoJason Roberts
5 months agoMichael Martinez
5 months agoThomas Morgan
6 months agoAngela Turner
5 months agoJustin Flores
5 months agoPaul Evans
5 months agoRachel Nguyen
5 months agoDorothy Turner
6 months agoPauline
6 months agoMarsha
6 months agoBelen
7 months agoLashaunda
7 months agoOlga
7 months agoMichal
8 months agoPok
8 months agoVanda
8 months agoShawnta
8 months agoLeatha
9 months agoAn
9 months agoDesirae
9 months agoGayla
9 months agoCecil
10 months agoLino
10 months agoHildred
10 months agoArthur
10 months agoJose
11 months agoIzetta
11 months agoCassie
11 months agoSol
11 months agoBeatriz
12 months agoLeigha
12 months agoLarae
1 year agoJesus
1 year agoTu
1 year agoGilma
1 year agoPhillip
1 year agoRolf
1 year agoMargart
1 year agoStanford
1 year agoRessie
1 year agoMillie
2 years agoLouis
2 years agoJacqueline
2 years agoMaryann
2 years agoNobuko
2 years agoOzell
2 years agoSanda
2 years agoViola
2 years agoPortia
2 years agoKristel
2 years agoBrandon
2 years agoLouvenia
2 years ago