What is the primary purpose of a security guideline?

To offer recommendations and best practices that support policies and procedures

To define the organization's security objectives and responsibilities

To provide step-by-step instructions for completing a security task

To mandate specific security controls that must be implemented

A healthcare organization's security policy states that 'all access to patient data must be authorized and monitored.' The security team needs to ensure that new IT staff understand exactly how to grant and review access. What should they create?

A security procedure detailing the steps for requesting, approving, and reviewing access

A security guideline recommending best practices for access management

A security awareness training session

A security standard defining role-based access control requirements

CompTIASecurityX (CASP+)

Domain 1Objective 1

Security Program Documentation CAS-005 Practice Questions (Page 2)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

4concepts

20%of the exam

Questions 6–10

6foundation · easy
Which document type would specify the minimum encryption algorithm and key length that must be used for data at rest?
Select an answer first
7foundation · easy
Which document type is most likely to include suggestions such as 'consider using multi-factor authentication for all administrative accounts'?
Select an answer first
8foundation · easy
What is the primary purpose of a security guideline?
Select an answer first
9foundation · easy
Which document type is typically the highest-level statement of an organization's security objectives and responsibilities?
Select an answer first
10application · medium
A healthcare organization's security policy states that 'all access to patient data must be authorized and monitored.' The security team needs to ensure that new IT staff understand exactly how to grant and review access. What should they create?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Security Program Documentation CAS-005 Practice Questions (Page 2)

Questions 6–10

Which document type would specify the minimum encryption algorithm and key length that must be used for data at rest?

Which document type is most likely to include suggestions such as 'consider using multi-factor authentication for all administrative accounts'?

What is the primary purpose of a security guideline?

Which document type is typically the highest-level statement of an organization's security objectives and responsibilities?

A healthcare organization's security policy states that 'all access to patient data must be authorized and monitored.' The security team needs to ensure that new IT staff understand exactly how to grant and review access. What should they create?

Keep studying — Governance, risk, and compliance