CompTIASecurityX (CASP+)
Domain 1Objective 11
Security Frameworks CAS-005 Practice Questions (Page 6)
Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
11concepts
20%of the exam
Questions 26–30
- 26
A regional bank is adopting the NIST Cybersecurity Framework to improve its security posture. The CISO wants to start by identifying which assets are most critical to business operations and understanding current risk exposure. According to the NIST CSF, which core function should the bank focus on first?
Select an answer first - 27
A security consultant is advising a client on how to use the NIST Cybersecurity Framework (CSF) to improve their security posture. The client asks about the purpose of the CSF. Which of the following best describes the purpose of the CSF?
Select an answer first - 28
Which component of the NIST CSF Core provides the highest-level view of cybersecurity outcomes?
Select an answer first - 29
A multinational corporation operates in a highly regulated industry and is evaluating security frameworks to guide its cybersecurity program. The company needs a framework that: (1) provides a common language for communicating cybersecurity risk to executives and board members, (2) is flexible enough to be applied across different business units with varying risk appetites, and (3) can be used to assess and improve the maturity of its cybersecurity program. Which framework best meets these requirements?
Select an answer first - 30
What is the purpose of a NIST Cybersecurity Framework profile?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.