A company is adopting microservice architecture in order to quickly remediate vulnerabilities and deploy to production. All of the microservices run on the same Linux platform. Significant time was spent updating the base OS before deploying code. Which of the following should the company do to make the process efficient?
Answer(s): A
Creating golden images with Terraform enables automated, consistent, and up-to-date deployment of microservices with a pre-patched base OS. This significantly reduces time spent on manual updates and accelerates production deployment in a microservices environment.
During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)
Answer(s): B,C
Conditional access allows the organization to restrict access based on device trust, enforcing user-to-device binding and blocking unauthorized BYOD devices.Network Access Control (NAC) ensures only compliant and authorized devices can connect to the network, enforcing security configurations and reducing BYOD risks.
An organization has several systems deployed in a public cloud and wants to confirm that when data retention periods are reached, the data is properly disposed of. Which of the following best meets the organization's needs?
Answer(s): C
Encrypting data with customer-managed keys and deleting both the key and the volume ensures that the data becomes cryptographically unrecoverable, even if the physical media still exists. This is the most reliable method for secure data disposal in cloud environments.
A security engineer reviews an after-action report from a previous security breach and notes a long lag time between detection and containment of a compromised account. The engineer suggests using SOAR to address this concern. Which of the following best explains the engineer's goal?
Answer(s): D
SOAR (Security Orchestration, Automation, and Response) platforms help automate and standardize incident response processes through runbooks, reducing response time and improving containment efficiency during future breaches.
During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should the organization implement to prevent a full review in the future?
A Change Control Board (CCB) enforces structured review and approval processes for changes before they reach production. Implementing a CCB ensures that all production changes are formally reviewed, preventing audit issues in the future.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.