What is a key benefit of automating the patch management process in an organization?

Reduces the window of exposure to known vulnerabilities

Eliminates the need for vulnerability scanning

Removes the need for change management

Guarantees that all patches are compatible with all applications

A security engineer wants to automate the collection of threat intelligence from a cloud provider's API and enrich it with internal data. The engineer needs to write a script that runs daily, pulls indicators of compromise (IOCs) from the cloud API, correlates them with internal logs, and generates a report. The engineer prefers Python for its libraries. Which approach best fits the requirement?

Use a Bash script with curl to call the API and grep to parse the data.

Write a Python script that uses the cloud provider's SDK to fetch IOCs, then uses pandas to correlate with internal log data, and outputs a CSV report.

Configure a SOAR platform to ingest the API data and run a playbook for correlation.

Write a PowerShell script that uses Invoke-RestMethod to call the API and ConvertFrom-Json to process data.

CompTIASecurityX (CASP+)

Domain 3Objective 1

Automation CAS-005 Practice Questions (Page 1)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

11concepts

31%of the exam

Questions 1–5

1foundation · easy
In a SOAR platform, what is the term for a predefined set of automated steps that are executed in response to a security incident?
Select an answer first
2foundation · easy
What is a key benefit of automating the patch management process in an organization?
Select an answer first
3foundation · easy
A cloud engineer wants to define and manage cloud infrastructure using declarative configuration files that can be version-controlled and reused. Which practice is this an example of?
Select an answer first
4application · medium
A security engineer wants to automate the collection of threat intelligence from a cloud provider's API and enrich it with internal data. The engineer needs to write a script that runs daily, pulls indicators of compromise (IOCs) from the cloud API, correlates them with internal logs, and generates a report. The engineer prefers Python for its libraries. Which approach best fits the requirement?
Select an answer first
5foundation · easy
A security administrator wants to ensure that all servers in an environment receive the latest security patches automatically. Which process should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Automation CAS-005 Practice Questions (Page 1)

Questions 1–5

In a SOAR platform, what is the term for a predefined set of automated steps that are executed in response to a security incident?

What is a key benefit of automating the patch management process in an organization?

A cloud engineer wants to define and manage cloud infrastructure using declarative configuration files that can be version-controlled and reused. Which practice is this an example of?

A security administrator wants to ensure that all servers in an environment receive the latest security patches automatically. Which process should be implemented?

Keep studying — Security engineering