Security Boundaries CAS-005 Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A cloud-based SaaS company is required to attest that all production servers are running a specific hardened operating system image. The company uses a configuration management tool. Which action would provide the most reliable attestation?

   • AUse the configuration management tool to continuously check each server's configuration against the hardened baseline and report any deviations.
   • BReview the server's hostname and IP address to confirm it is in the production network.
   • CPerform a one-time manual audit of all servers at the time of deployment.
   • DCheck the server's uptime to ensure it has been running since the last patch cycle.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large enterprise is planning a new security architecture. The enterprise has a mix of legacy systems and modern cloud-based applications. The security team must identify which assets are most critical to the business and should be placed in the highest security zone. Which factor should the team consider first when prioritizing assets?

   • AThe age of the asset and whether it is considered legacy.
   • BThe number of users who access the asset.
   • CThe potential business impact if the asset is compromised, lost, or unavailable.
   • DThe cost of the asset and its replacement value.
   Reveal Solution Discussion Select an answer first