An organization recently migrated data to a new file management system. The architect decides to use a discretionary authorization model on the new system. Which of the following best explains the architect's choice?
Answer(s): B
A discretionary access control (DAC) model allows data owners or stakeholders to grant access at their discretion. If permissions couldn't be migrated, assigning stakeholders responsibility to manage access aligns with DAC and explains the architect's choice.
An organization recently acquired another company that is running a different EDR solution. A SOC analyst wants to automate the isolation of endpoints that are found to be compromised. Which of the following workflows best mitigates the risk of false positives and reduces the spread of malicious code?
Answer(s): A
Using a SOAR solution integrated with a Threat Intelligence Platform (TIP) enables automated, intelligence- driven decisions to isolate endpoints via APIs. This workflow balances automation with validation to reduce false positives while quickly containing threats, especially across multiple EDR platforms.
While reviewing recent incident reports a security officer discovers that several employees were contacted by the same individual who impersonated a recruiter. Which of the following best describes this type of correlation?
Answer(s): D
Attack pattern analysis involves identifying recurring techniques or behaviors used by threat actors - such as impersonating a recruiter - to correlate incidents and uncover broader campaigns. The security officer is recognizing a consistent method across multiple reports, which defines this as attack pattern analysis.
A news organization wants to implement workflows that allow users to request that untruthful data be retraced and scrubbed from online publications to comply with the right to be forgotten. Which of the following regulations is the organization most likely trying to address?
The General Data Protection Regulation (GDPR) includes the right to be forgotten, which allows individuals to request the erasure of personal data - including false or outdated information - from online sources. This directly aligns with the news organization's intent.
An analyst wants to conduct a risk assessment on a new application that is being deployed. Given the following information:Total budget allocation for the new application is unavailable.Recovery time objectives have not been setDowntime loss calculations cannot be providedWhich of the following statements describes the reason a qualitative assessment is the best option?
A qualitative risk assessment is appropriate when quantitative data such as budget, downtime costs, or RTOs are unavailable. It relies on expert judgment, likelihood, and impact categories rather than precise metrics, making it the best option in this scenario.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.