Which of the following is a key component of the CSA framework?

The CIS Critical Security Controls

The Cloud Controls Matrix (CCM)

A company is considering using the Cloud Security Alliance (CSA) framework to guide its cloud security strategy. The security team wants to understand the purpose and structure of the CSA framework. Which of the following best describes the CSA framework?

A collection of best practices and controls specifically for cloud computing

A general framework for all IT security, not specific to cloud

A certification program for cloud security professionals

A regulatory standard that mandates cloud security controls

An organization is adopting cloud services and needs a framework that provides cloud-specific security controls. Which framework is most appropriate for this need?

CSA Cloud Controls Matrix (CCM)

NIST Cybersecurity Framework (CSF)

What is the primary purpose of the NIST Cybersecurity Framework (CSF)?

To offer a risk-based approach for organizations to manage and reduce cybersecurity risk

To provide a set of mandatory security controls that organizations must implement

To replace all existing security standards and regulations

To certify organizations that meet its requirements

CompTIASecurityX (CASP+)

Domain 1Objective 11

Security Frameworks CAS-005 Practice Questions (Page 3)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

11concepts

20%of the exam

Questions 11–15

11foundation · easy
Which of the following is a key component of the CSA framework?
Select an answer first
12application · medium
A company is considering using the Cloud Security Alliance (CSA) framework to guide its cloud security strategy. The security team wants to understand the purpose and structure of the CSA framework. Which of the following best describes the CSA framework?
Select an answer first
13foundation · easy
An organization is adopting cloud services and needs a framework that provides cloud-specific security controls. Which framework is most appropriate for this need?
Select an answer first
14foundation · easy
What is the primary purpose of the NIST Cybersecurity Framework (CSF)?
Select an answer first
15application · medium
A government agency is required to implement a set of prioritized cybersecurity actions that are widely recognized and can be used to defend against common cyber threats. The agency wants a framework that provides a clear, prioritized list of actions, not a comprehensive management system. Which framework is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.