nerdexam
CompTIA

CAS-003 · Question #214

A Security Manager is part of a team selecting web conferencing systems for internal use. The system will only be used for internal employee collaboration. Which of the following are the MAIN…

The correct answer is A. Security of data storage C. System availability D. User authentication strategy. For an internal web conferencing system, the security manager's primary concerns center on the CIA triad as it applies to the platform - protecting stored data, ensuring the system is available, and controlling who can authenticate. Cost, PBX integration, and OS compatibility…

Enterprise Security Architecture

Question

A Security Manager is part of a team selecting web conferencing systems for internal use. The system will only be used for internal employee collaboration. Which of the following are the MAIN concerns of the security manager? (Select THREE).

Options

  • ASecurity of data storage
  • BThe cost of the solution
  • CSystem availability
  • DUser authentication strategy
  • EPBX integration of the service
  • FOperating system compatibility

How the community answered

(37 responses)
  • A
    84% (31)
  • B
    8% (3)
  • E
    5% (2)
  • F
    3% (1)

Why each option

For an internal web conferencing system, the security manager's primary concerns center on the CIA triad as it applies to the platform - protecting stored data, ensuring the system is available, and controlling who can authenticate. Cost, PBX integration, and OS compatibility are operational concerns outside the security scope.

ASecurity of data storageCorrect

Security of data storage ensures that meeting recordings, shared files, and session content are protected from unauthorized access or disclosure.

BThe cost of the solution

Cost is a financial and procurement concern outside the security manager's primary responsibilities.

CSystem availabilityCorrect

System availability is a core security concern under the availability pillar of the CIA triad, as downtime disrupts authorized employee collaboration.

DUser authentication strategyCorrect

User authentication strategy governs who is permitted to join sessions, preventing unauthorized access to internal communications.

EPBX integration of the service

PBX integration is a telephony and operational requirement that does not directly affect the security posture of the web conferencing platform.

FOperating system compatibility

Operating system compatibility is an IT infrastructure concern managed by systems administrators, not a primary security consideration.

Concept tested: Security requirements selection for internal collaboration platforms

Source: https://csrc.nist.gov/publications/detail/sp/800-46/rev-2/final

Topics

#web conferencing#data storage security#user authentication#availability

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice