Which of the following is a key principle emphasized in the CSA Security Guidance?

Complete security responsibility lies with the cloud provider

Shared responsibility between cloud providers and customers

Security controls should be identical for all cloud services

Security is solely the customer's responsibility

How does an organization typically use a NIST CSF profile to improve its cybersecurity posture?

By submitting the profile to NIST for approval and certification

By using the profile to determine the exact security controls to implement

By using the profile as a substitute for a risk assessment

By comparing its current profile to its target profile to identify gaps and prioritize actions

A company is planning to move its data to a cloud provider and wants to ensure that the provider's security practices align with industry best practices. The security team is reviewing the CSA Security Guidance for Critical Areas of Focus in Cloud Computing. Which of the following is a key principle emphasized in this guidance?

Elimination of all security risks

Exclusive use of on-premises infrastructure

What is the primary purpose of the CSA Cloud Controls Matrix (CCM)?

To certify cloud service providers

To provide a set of cloud-specific security controls mapped to various standards

To provide a list of mandatory controls for all cloud customers

To replace the NIST Cybersecurity Framework

CompTIASecurityX (CASP+)

Domain 1Objective 11

Security Frameworks CAS-005 Practice Questions (Page 2)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

11concepts

20%of the exam

Questions 6–10

6foundation · easy
Which of the following is a key principle emphasized in the CSA Security Guidance?
Select an answer first
7foundation · easy
How does an organization typically use a NIST CSF profile to improve its cybersecurity posture?
Select an answer first
8application · medium
A company is planning to move its data to a cloud provider and wants to ensure that the provider's security practices align with industry best practices. The security team is reviewing the CSA Security Guidance for Critical Areas of Focus in Cloud Computing. Which of the following is a key principle emphasized in this guidance?
Select an answer first
9foundation · easy
What is the primary purpose of the CSA Cloud Controls Matrix (CCM)?
Select an answer first
10foundation · easy
Which NIST CSF implementation tier is characterized by an organization that has formalized risk management practices and is able to respond to changes in cybersecurity risk in a timely manner?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Security Frameworks CAS-005 Practice Questions (Page 2)

Questions 6–10

Which of the following is a key principle emphasized in the CSA Security Guidance?

How does an organization typically use a NIST CSF profile to improve its cybersecurity posture?

What is the primary purpose of the CSA Cloud Controls Matrix (CCM)?

Which NIST CSF implementation tier is characterized by an organization that has formalized risk management practices and is able to respond to changes in cybersecurity risk in a timely manner?

Keep studying — Governance, risk, and compliance