A zero trust environment is being monitored. The security team wants to ensure that access policies are being followed. Which continuous monitoring activity is most directly aligned with this goal?

Scanning for vulnerabilities in the operating systems of all servers.

Reviewing system logs for failed login attempts.

Auditing access logs to verify that users are only accessing resources they are authorized to access.

Monitoring network traffic for unusual bandwidth usage.

An organization is implementing zero trust. A user in the finance department is attempting to access a human resources application. The access control policy should be based on the subject-object relationship. What is the most important factor to consider when defining this relationship?

The type of device the user is using, such as a company-issued laptop or a personal smartphone.

The user's current network location, such as being on the corporate LAN or a remote connection.

The time of day the user is attempting to access the application.

The user's job function and the specific data they need to perform their job.

A hospital is implementing zero trust. A nurse needs to access patient records from a workstation in the cardiology ward. The security architect is defining the subject-object relationship. Which policy element is most critical to define first to establish this relationship correctly?

The type of encryption used between the workstation and the patient record server.

The authentication method the nurse will use, such as a smart card or biometric scan.

The network segment the workstation is connected to, to ensure it is in the cardiology VLAN.

The specific patient records (objects) the nurse (subject) is allowed to access, based on their role and the principle of least privilege.

CompTIASecurityX (CASP+)

Domain 2Objective 7

Zero Trust Concepts CAS-005 Practice Questions (Page 3)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 13 practice questions to prepare you well beyond it. (estimate)

13questions here

3free pages

6concepts

27%of the exam

Questions 11–13

11application · medium
A zero trust environment is being monitored. The security team wants to ensure that access policies are being followed. Which continuous monitoring activity is most directly aligned with this goal?
Select an answer first
12application · medium
An organization is implementing zero trust. A user in the finance department is attempting to access a human resources application. The access control policy should be based on the subject-object relationship. What is the most important factor to consider when defining this relationship?
Select an answer first
13application · medium
A hospital is implementing zero trust. A nurse needs to access patient records from a workstation in the cardiology ward. The security architect is defining the subject-object relationship. Which policy element is most critical to define first to establish this relationship correctly?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Zero Trust Concepts CAS-005 Practice Questions (Page 3)

Questions 11–13

A zero trust environment is being monitored. The security team wants to ensure that access policies are being followed. Which continuous monitoring activity is most directly aligned with this goal?

An organization is implementing zero trust. A user in the finance department is attempting to access a human resources application. The access control policy should be based on the subject-object relationship. What is the most important factor to consider when defining this relationship?

A hospital is implementing zero trust. A nurse needs to access patient records from a workstation in the cardiology ward. The security architect is defining the subject-object relationship. Which policy element is most critical to define first to establish this relationship correctly?

Keep studying — Security architecture