Exam CAS-005 topic 1 question 69 discussion

Actual exam question from CompTIA's CAS-005

Question #: 69
Topic #: 1

A regulated company is in the process of refreshing its entire infrastructure. The company has a business-critical process running on an old 2008 Windows server. If this server fails, the company would lose millions of dollars in revenue. Which of the following actions should the company should take?

A. Accept the risk as the cost of doing business.
B. Create an organizational risk register for project prioritization.
C. Implement network compensating controls.
D. Purchase insurance to offset the cost if a failure occurred.

Show Suggested Answer

Suggested Answer: B 🗳️

by vicbersong at May 1, 2025, 3:55 p.m.

Comments

Submit Cancel

vicbersong

1 month, 3 weeks ago

Selected Answer: B

The best option in this scenario is: B. Create an organizational risk register for project prioritization. Here's why: The server hosts a business-critical process on unsupported legacy infrastructure, meaning the risk of failure is high, and the impact is severe. By documenting it in the risk register, leadership can prioritize remediation, such as migration, virtualization, or building in high availability or backups — actions aligned with a regulated environment. This approach also satisfies governance and compliance requirements by demonstrating risk awareness and action. Why not the others? A. Accept the risk: Not acceptable in a regulated environment with high financial impact. C. Network compensating controls: Good for security, but won't protect against hardware or OS failure. D. Insurance: Might cover some financial loss, but won't prevent service interruption or regulatory consequences.

upvoted 1 times

...