CAS-005 CompTIA Exam Lab Questions

A Configuration Management Database (CMDB) provides the best foundation for identifying which specific assets are affected by a given vulnerability. A CMDB maintains detailed information about the IT environment, including hardware, software, configurations, and relationships between assets. This comprehensive view allows organizations to quickly identify and address vulnerabilities affecting specific assets.

Reviewing data sovereignty laws in countries where the organization has no presence is likely due to concerns about regulatory enforcement. Data sovereignty laws dictate how data can be stored, processed, and transferred across borders. Understanding these laws is crucial for compliance, especially if the organization handles data that may be subject to foreign regulations.

A. The organization is performing due diligence of potential tax issues: This is less likely as tax issues are generally not directly related to data sovereignty laws.

B. The organization has been subject to legal proceedings in countries where it has a presence: While possible, this does not explain the focus on countries where the organization has no presence.

C. The organization is concerned with new regulatory enforcement in other countries: This is the most likely reason. New regulations could impact the organization’s operations, especially if they involve data transfers or processing data from these countries.

D. The organization has suffered brand reputation damage from incorrect media coverage: This is less relevant to the need for reviewing data sovereignty laws.

Animmutable databasepreventsmodifications or deletions, ensuring resilience against ransomware while maintaining multiple copies of data.

Comprehensive and Detailed Explanation:

Managing telemetry and differentiating it by office requires a way to categorize data. Let’s evaluate:

A. Sensor placement:Useful for data collection but doesn’t inherently differentiate by office.

B. Data labeling:Assigns metadata (e.g., office location) to telemetry, enabling differentiation. This aligns with CAS-005’s focus on data management for security operations.

C. Continuous monitoring:Ensures ongoing data collection but doesn’t address differentiation.