A company is implementing an ISMS and has decided to use ISO/IEC 27001 as the framework. Which of the following is a key requirement of ISO/IEC 27001 that the company must implement?

Implement a firewall and intrusion detection system.

Obtain certification from an accredited certification body.

Conduct a risk assessment and implement a risk treatment plan.

Encrypt all data at rest and in transit.

Why is it important for an organization to align its security practices with industry-specific standards and regulations?

To guarantee that all security breaches are prevented

To ensure compliance with legal and regulatory requirements specific to the industry

To eliminate the need for risk assessments

To reduce the need for security controls

Which of the following is an example of an industry-specific compliance standard?

ISO/IEC 27001 for all organizations

PCI DSS for organizations that handle payment card data

NIST SP 800-53 for all organizations

CompTIASecurityX (CASP+)

Domain 1Objective 10

Compliance Strategies CAS-005 Practice Questions (Page 1)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

20%of the exam

Questions 1–5

1application · medium
A company is implementing an ISMS and has decided to use ISO/IEC 27001 as the framework. Which of the following is a key requirement of ISO/IEC 27001 that the company must implement?
Select an answer first
2foundation · easy
Why is it important for an organization to align its security practices with industry-specific standards and regulations?
Select an answer first
3foundation · easy
Which of the following is an example of an industry-specific compliance standard?
Select an answer first
4foundation · easy
A security analyst is reviewing the compliance requirements for an organization that processes credit card payments. Which standard is specifically designed to protect cardholder data and applies to any entity that stores, processes, or transmits cardholder data?
Select an answer first
5foundation · easy
Which of the following is a standard within the ISO/IEC 27000 series that provides requirements for an information security management system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Compliance Strategies CAS-005 Practice Questions (Page 1)

Questions 1–5

A company is implementing an ISMS and has decided to use ISO/IEC 27001 as the framework. Which of the following is a key requirement of ISO/IEC 27001 that the company must implement?

Why is it important for an organization to align its security practices with industry-specific standards and regulations?

Which of the following is an example of an industry-specific compliance standard?

A security analyst is reviewing the compliance requirements for an organization that processes credit card payments. Which standard is specifically designed to protect cardholder data and applies to any entity that stores, processes, or transmits cardholder data?

Which of the following is a standard within the ISO/IEC 27000 series that provides requirements for an information security management system?

Keep studying — Governance, risk, and compliance