Exam CAS-004 topic 1 question 225 discussion

Actual exam question from CompTIA's CAS-004

Question #: 225
Topic #: 1

Users are reporting intermittent access issues with a new cloud application that was recently added to the network. Upon investigation, the security administrator notices the human resources department is able to run required queries with the new application, but the marketing department is unable to pull any needed reports on various resources using the new application. Which of the following MOST likely needs to be done to avoid this in the future?

A. Modify the ACLs.
B. Review the Active Directory.
C. Update the marketing department's browser.
D. Reconfigure the WAF.

Show Suggested Answer

Suggested Answer: A 🗳️

by OneSaint at Feb. 9, 2023, 5:49 p.m.

Comments

Submit Cancel

OneSaint

Highly Voted 2 years ago

Selected Answer: A

Access Control List needs modification for proper access to marketing dept.

upvoted 7 times

...

Blingy

Most Recent 1 year ago

A is the answer

upvoted 1 times

...

Potato42

1 year, 1 month ago

Another dumb question by CompTIA. The keyword here is "intermittent" - it means that a given user can sometimes access the resource and sometimes cannot. If it was related to ACLs, the issue would never be intermittent in the first place. But I'd still go with A, since it's the only answer that makes sense in this question. If I were a smart-ass, I'd go for D, but CompTIA doesn't like smart-asses.

upvoted 4 times

hb0011

1 year, 1 month ago

I was just thinking the same thing

upvoted 1 times

...

p1s3c

1 year, 9 months ago

Selected Answer: A

Based on the given scenario, it is likely that the issue is related to access controls within the new cloud application, and the marketing department does not have the appropriate permissions to run the necessary reports. Therefore, to avoid this in the future, the security administrator should modify the application's access control lists (ACLs) to ensure that all departments have the appropriate access and permissions to use the new application as needed.

upvoted 2 times

...

last_resort

1 year, 10 months ago

Selected Answer: D

D. Reconfigure WAF. Permissions are probably improperly assigned. And this is for a web application.

upvoted 1 times

Ariel235788

1 year, 4 months ago

Copy/Paste from ChatGPT: The issue described, where one department can access a new cloud application while another cannot, is likely related to access control and permissions. To avoid this issue in the future, you should: A. Modify the ACLs (Access Control Lists). Explanation: Access Control Lists (ACLs): ACLs are used to define permissions and control access to resources. In this scenario, it's possible that the ACLs for the new cloud application were not configured properly to grant the marketing department the necessary access rights. Modifying the ACLs to ensure that the marketing department has the appropriate permissions to access the required reports and resources is the most likely solution.

upvoted 2 times

...