exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 522 discussion

Actual exam question from CompTIA's CAS-004
Question #: 522
Topic #: 1
[All CAS-004 Questions]

Which of the following describes how a risk assessment is performed when an organization has a critical vendor that provides multiple products?

  • A. At the individual product level
  • B. Through the selection of a random product
  • C. Using a third-party audit report
  • D. By choosing a major product
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
grelaman
7 months ago
Selected Answer: A
When an organization has a critical vendor that provides multiple products, it is essential to perform a risk assessment at the individual product level. This approach ensures that the organization thoroughly evaluates the specific risks associated with each product. Each product may have its own set of vulnerabilities due to differences in design, technology stack, or integration points. Assessing risks individually allows for the identification of product-specific threats and vulnerabilities. By understanding the risk level of each product, the organization can prioritize mitigation efforts where they are most needed. Different products may require different security controls or mitigation strategies.
upvoted 1 times
...
Bright07
7 months, 1 week ago
Ans A. At the individual product levelThis allows for a comprehensive understanding of the risks associated with each specific product, ensuring that all potential vulnerabilities and impacts are properly assessed.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago