Exam CAS-003 topic 1 question 436 discussion

Actual exam question from CompTIA's CAS-003

Question #: 436
Topic #: 1

An organization that develops military technology is considering expansion into a foreign country. The organization's owners want to understand the risks associated with such an expansion, and the organization does not want to fund an intensive assessment. Which of the following approaches should be taken?

A. Penetration test
B. Tabletop assessment
C. Compliance assessment
D. Configuration security test

Show Suggested Answer

Suggested Answer: B 🗳️

by chris1025 at Sept. 21, 2021, 7:38 p.m.

Comments

Submit Cancel

PlumpyTumbler

3 years, 10 months ago

This is a total softball question. They hand you the answer with "the organization does not want to fund an intensive assessment"

upvoted 1 times

...

chris1025

3 years, 10 months ago

Between B (tabletop) and C (compliance) I lean more towards C as I believe tabletop is usually more geared to disaster scenarios and making sure everyone knows what to do. A compliance assessment is really a gap assessment. You are looking to identify gaps between your existing control environment and what is required. A and D are out because they're only talking about it, there's nothing to test.

upvoted 1 times

vorozco

3 years, 4 months ago

Tabletop exercises are not just for disaster scenarios. "Tabletop exercises bring together security-minded people and other stakeholders to the table to discuss their roles and ideas for a particular situation such as a security assessment. They may go over things like preferred tools, techniques, targets, and the time and place of assessments." AIO p.367

upvoted 1 times

...