Exam CAS-003 topic 1 question 403 discussion

Actual exam question from CompTIA's CAS-003

Question #: 403
Topic #: 1

The information security manager of an e-commerce company receives an alert over the weekend that all the servers in a datacenter have gone offline. Upon discussing this situation with the facilities manager, the information security manager learns there was planned electrical maintenance. The information security manager is upset at not being part of the maintenance planning, as this could have resulted in a loss of:

A. data confidentiality
B. data security
C. PCI compliance
D. business availability

Show Suggested Answer

Suggested Answer: D 🗳️

by Cryteague at April 8, 2021, 10:55 p.m.

Comments

Submit Cancel

Cryteague

4 years, 2 months ago

PCI compliant data centers require physical, network and data security. Physical security means only authorized personnel should have limited access to server racks, suites and cages. Environmental controls should include 24×7 monitoring, logged surveillance, and multiple alarm systems.

upvoted 3 times

JamesMcD123

3 years, 9 months ago

was going with D but based on what you said and thinking The Security manager should be more concerned about PCI than business availability - now I am leaning towards C. Tough one though

upvoted 3 times

...