Configuration Management CAS-005 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of monitoring assets throughout their life cycle?

   • ATo reduce the need for asset classification
   • BTo detect unauthorized use or changes and ensure assets are used appropriately
   • CTo eliminate the need for change management
   • DTo increase the number of assets in the organization
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software development company uses a CMDB to track its application components. A developer is about to update a shared authentication library that is used by several applications. The change management process requires an impact assessment. Which CMDB data is MOST relevant for this assessment?

   • AThe list of applications that have a 'uses' relationship with the authentication library.
   • BThe list of servers where the authentication library is installed.
   • CThe cost of the authentication library and its maintenance contract.
   • DThe version history of the authentication library.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A financial institution is required to comply with regulations that mandate strict controls on systems that process payment card data. The institution has a CMDB that tracks all configuration items. The compliance team wants to ensure that any change to a system that processes card data is subject to additional review. Which CMDB feature is MOST useful for this requirement?

   • AThe change history of each CI, which shows past changes and approvals.
   • BThe asset inventory list, which shows the location and owner of each CI.
   • CThe classification of CIs, such as 'cardholder data environment' (CDE), which can be used to trigger additional review for changes.
   • DThe relationships between CIs, which show how systems are connected.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An organization is retiring a server that has reached the end of its useful life. Which life cycle stage does this activity represent?

   • AAcquisition
   • BOperation
   • CDeployment
   • DDisposal
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which compliance requirement is often associated with the disposal of assets that contain sensitive data?

   • ATraffic regulations
   • BFood safety standards
   • CBuilding safety codes
   • DData protection regulations such as GDPR or HIPAA
   Reveal Solution Discussion Select an answer first