A data flow analysis for a healthcare application reveals that patient data is sent from the front-end to a third-party analytics service. The analytics service is not compliant with the organization's data protection standards. The security team must address this risk. Which action is MOST appropriate?

Anonymize the data before sending it to the analytics service.

Stop sending data to the analytics service and use an in-house solution.

Encrypt the data before sending it to the analytics service.

Require the analytics service to comply with the organization's data protection standards.

How can data flow impact system security?

Data flow has no impact on security

Data flowing through untrusted networks can be intercepted

Data flow only affects the user interface

Data flow only affects system performance

During an architecture review, what is the primary purpose of evaluating the system architecture?

To calculate the total cost of ownership for the system

To ensure the system meets all functional requirements

To identify potential security vulnerabilities and weaknesses in the design

To verify the system's performance under load

Why is it important to identify trust boundaries in a system?

To know where security controls are necessary

To determine the system's performance capacity

To decide the color scheme of the user interface

To calculate the cost of cloud services

CompTIASecurityX (CASP+)

Domain 1Objective 9

Attack Surface CAS-005 Practice Questions (Page 1)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

20%of the exam

Questions 1–5

1expert · hard
A data flow analysis for a healthcare application reveals that patient data is sent from the front-end to a third-party analytics service. The analytics service is not compliant with the organization's data protection standards. The security team must address this risk. Which action is MOST appropriate?
Select an answer first
2foundation · easy
How can data flow impact system security?
Select an answer first
3foundation · easy
During an architecture review, what is the primary purpose of evaluating the system architecture?
Select an answer first
4foundation · easy
Why is it important to identify trust boundaries in a system?
Select an answer first
5foundation · easy
Which security control is commonly implemented at a trust boundary?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Attack Surface CAS-005 Practice Questions (Page 1)

Questions 1–5

How can data flow impact system security?

During an architecture review, what is the primary purpose of evaluating the system architecture?

Why is it important to identify trust boundaries in a system?

Which security control is commonly implemented at a trust boundary?

Keep studying — Governance, risk, and compliance