CA1-005 Practice Test

Review 115 CA1-005 practice questions with answer explanations and community insights.

Question 1

A company plans to implement a research facility with intellectual property data that should be protected. The following is the security diagram proposed by the security architect: Which of the following security architect models is illustrated by the diagram?

  1. Identity and access management model
  2. Agent-based security model
  3. Perimeter protection security model
  4. Zero Trust security model

Question 2

A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity? (Choose two.)

  1. CWPP
  2. YARA
  3. ATT&CK
  4. STIX
  5. TAXII
  6. JTAG

Question 3

During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)

  1. Cloud IAM, to enforce the use of token-based MFA
  2. Conditional access, to enforce user-to-device binding
  3. NAC, to enforce device configuration requirements
  4. PAM, to enforce local password policies
  5. SD-WAN, to enforce web content filtering through external proxies
  6. DLP, to enforce data protection capabilities

Question 4

A security administrator is performing a gap assessment against a specific OS benchmark. The benchmark requires the following configurations be applied to endpoints: • Full disk encryption • Host-based firewall • Time synchronization • Password policies • Application allow listing • Zero Trust application access Which of the following solutions best addresses the requirements? (Choose two.)

  1. MDM
  2. CASB
  3. SBoM
  4. SCAP
  5. SASE
  6. HIDS

Question 5

A global organization is reviewing potential vendors to outsource a critical payroll function. Each vendor's plan includes using local resources in multiple regions to ensure compliance with all regulations. The organization's Chief Information Security Officer is conducting a risk assessment on the potential outsourcing vendors' subprocessors. Which of the following best explains the need for this risk assessment?

  1. Risk mitigations must be more comprehensive than the existing payroll provider.
  2. Due care must be exercised during all procurement activities.
  3. The responsibility of protecting PII remains with the organization.
  4. Specific regulatory requirements must be met in each jurisdiction.