A security analyst needs to automate the analysis of a large number of log files from multiple sources. The analysis should identify potential security incidents and generate a summary report. The analyst wants to use Python for its data processing capabilities. However, the analyst is concerned about the performance of processing large files. Which approach best addresses this concern?

Use Python with pandas and Dask to process the log files in parallel and generate the report.

Use Python with the multiprocessing module to process files in parallel.

Use a Bash script with grep and awk to analyze the logs.

Use Python with a simple loop to read each file line by line.

A security team wants to automate the response to a specific event that occurs on multiple Windows servers. The response should run a PowerShell script that collects forensic data and uploads it to a central storage. The team wants to use event triggers, but they are concerned about the reliability of the trigger if the server is under heavy load. Which approach best addresses this concern?

Use a scheduled task with a delay and retry settings to ensure the script runs even if the initial trigger is missed.

Use a Bash script via WSL to monitor the event log.

Use a SOAR platform to monitor the event and trigger the response.

Use a PowerShell script that runs continuously and polls for the event.

CompTIASecurityX (CASP+)

Domain 3Objective 1

Automation CAS-005 Practice Questions (Page 7)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

11concepts

31%of the exam

Questions 31–35

31expert · hard
A security analyst needs to automate the analysis of a large number of log files from multiple sources. The analysis should identify potential security incidents and generate a summary report. The analyst wants to use Python for its data processing capabilities. However, the analyst is concerned about the performance of processing large files. Which approach best addresses this concern?
Select an answer first
32foundation · easy
A security administrator wants to write a PowerShell script that stops a service named 'VulnSvc' if it is running. Which PowerShell cmdlet should be used to stop the service?
Select an answer first
33expert · hard
A security team wants to automate the response to a specific event that occurs on multiple Windows servers. The response should run a PowerShell script that collects forensic data and uploads it to a central storage. The team wants to use event triggers, but they are concerned about the reliability of the trigger if the server is under heavy load. Which approach best addresses this concern?
Select an answer first
34foundation · easy
In a SOAR platform, what is the term for the mechanism that initiates a playbook execution when a specific security alert is received?
Select an answer first
35foundation · easy
A security analyst wants to use a generative AI model to automatically create realistic phishing email examples for security awareness training. Which capability of generative AI is being utilized?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Automation CAS-005 Practice Questions (Page 7)

Questions 31–35

A security administrator wants to write a PowerShell script that stops a service named 'VulnSvc' if it is running. Which PowerShell cmdlet should be used to stop the service?

In a SOAR platform, what is the term for the mechanism that initiates a playbook execution when a specific security alert is received?

A security analyst wants to use a generative AI model to automatically create realistic phishing email examples for security awareness training. Which capability of generative AI is being utilized?

Keep studying — Security engineering