A managed security service provider (MSSP) is responsible for attesting that its clients' servers are compliant with security baselines. The MSSP manages servers across multiple clients and must provide evidence of compliance to each client. Which approach should the MSSP use to provide reliable attestation?

Use a centralized configuration management system that checks each server against the client-specific baseline and generates a compliance report for each client.

Rely on the client's own attestation that their servers are compliant.

Conduct a manual audit of each client's servers once a year.

Use a single baseline for all clients to simplify management.

A company is implementing an asset management program that must comply with a regulatory requirement to attest to the security configuration of all assets. The company has a mix of on-premises and cloud-based assets. Which approach should the company use to ensure consistent asset management and attestation across both environments?

Use a spreadsheet to track all assets manually.

Focus asset management efforts on cloud assets only, as they are more dynamic.

Maintain separate asset inventories for on-premises and cloud assets.

Use a single asset management platform that integrates with both on-premises and cloud environments and provides a unified view of all assets.

A technology company is implementing a data perimeter to protect its intellectual property. The company wants to ensure that source code stored in a cloud repository is not downloaded by unauthorized users. Which control should the company implement?

Encrypt the source code in the repository, but allow all users to download it.

Monitor the repository's download logs for suspicious activity.

Use a strong password for the repository administrator account.

Configure the cloud repository's access policies to restrict download permissions to only authorized users and groups.

Which activity is the primary purpose of asset identification in an organization?

To automatically patch all identified assets on a regular schedule

To assign a monetary value to each asset for insurance purposes

To discover and categorize assets so that security priorities can be established

To create a network diagram showing all connections between systems

What is the primary goal of asset management throughout an asset's lifecycle?

To reduce the total cost of ownership for all hardware

To track only software licenses for compliance purposes

To replace all assets every three years

To ensure security policies are applied consistently from acquisition to disposal

CompTIASecurityX (CASP+)

Domain 2Objective 5

Security Boundaries CAS-005 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

27%of the exam

Questions 6–10

6expert · hard
A managed security service provider (MSSP) is responsible for attesting that its clients' servers are compliant with security baselines. The MSSP manages servers across multiple clients and must provide evidence of compliance to each client. Which approach should the MSSP use to provide reliable attestation?
Select an answer first
7expert · hard
A company is implementing an asset management program that must comply with a regulatory requirement to attest to the security configuration of all assets. The company has a mix of on-premises and cloud-based assets. Which approach should the company use to ensure consistent asset management and attestation across both environments?
Select an answer first
8application · medium
A technology company is implementing a data perimeter to protect its intellectual property. The company wants to ensure that source code stored in a cloud repository is not downloaded by unauthorized users. Which control should the company implement?
Select an answer first
9foundation · easy
Which activity is the primary purpose of asset identification in an organization?
Select an answer first
10foundation · easy
What is the primary goal of asset management throughout an asset's lifecycle?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Security Boundaries CAS-005 Practice Questions (Page 2)

Questions 6–10

A technology company is implementing a data perimeter to protect its intellectual property. The company wants to ensure that source code stored in a cloud repository is not downloaded by unauthorized users. Which control should the company implement?

Which activity is the primary purpose of asset identification in an organization?

What is the primary goal of asset management throughout an asset's lifecycle?

Keep studying — Security architecture