Configuration Management CAS-005 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In a CMDB, how are relationships between configuration items typically documented?

   • ABy using only IP addresses to link CIs
   • BBy defining dependency and connectivity relationships between CIs
   • CBy assigning the same serial number to related CIs
   • DBy storing all CIs in a flat list without any connections
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A manufacturing company is replacing its fleet of industrial control system (ICS) workstations. The old workstations contain proprietary production data and are being decommissioned. The IT manager must ensure that the data is not recoverable after the workstations are disposed of. Which procedure BEST meets this requirement?

   • ARemove the drives and store them in a locked cabinet for future use.
   • BDelete the sensitive files and empty the recycle bin on each workstation.
   • CFormat the drives and then reinstall the operating system before disposal.
   • DPerform a cryptographic erase of the storage drives and then physically destroy the drives.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A financial services firm is implementing a new asset management program. The security team has identified that some laptops used by executives contain highly sensitive client data, while other laptops used by general staff contain only standard office documents. The firm wants to prioritize security controls based on the importance of the data each asset handles. Which approach BEST supports this goal?

   • ADeploy a mobile device management (MDM) solution to all laptops and rely on it to enforce all security policies.
   • BApply the same security controls to all laptops to ensure uniform protection.
   • CTrack laptops by serial number and assign them to users, but do not differentiate their security requirements.
   • DClassify each laptop based on the data it processes and apply security controls accordingly.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of classifying assets based on their importance and role?

   • ATo prioritize security controls and resource allocation
   • BTo assign a monetary value to every asset
   • CTo reduce the number of assets in the organization
   • DTo ensure all assets are treated equally
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A retail company's change management process requires that all changes to production systems be approved by the CAB. A developer needs to update a configuration file on a web server to fix a critical security vulnerability. The developer submits a change request, but the CAB cannot meet for two days. What is the BEST course of action?

   • AAsk the CAB chair for an emergency change approval, explaining the urgency.
   • BApply the change immediately and document it after the fact, citing the urgency of the vulnerability.
   • CApply the change and do not document it, as it is a minor configuration update.
   • DSubmit the change request and wait for the CAB approval before making the change.
   Reveal Solution Discussion Select an answer first