nerdexam
CompTIA

CAS-003 · Question #379

A security architect has assigned an engineer to implement a system to maintain visibility, corporate IT devices as they transfer from department to department. The engineer must ensure all…

The correct answer is B. Blockchain-based asset management. Blockchain-based asset management meets both stated requirements uniquely well: (1) maintaining a tamper-evident chain of custody as devices transfer between departments, and (2) providing a transparent, verifiable record that all employees can view. A blockchain ledger is…

Technical Integration of Enterprise Security

Question

A security architect has assigned an engineer to implement a system to maintain visibility, corporate IT devices as they transfer from department to department. The engineer must ensure all employees can view a secure record of who is responsible for each device. Which of the following would be the BEST mechanism to implement the stated requirements?

Options

  • AElectronically signed equipment receipts
  • BBlockchain-based asset management
  • CWAYF-based technologies.
  • DContext-aware authentication mechanisms

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    81% (17)
  • C
    10% (2)
  • D
    5% (1)

Explanation

Blockchain-based asset management meets both stated requirements uniquely well: (1) maintaining a tamper-evident chain of custody as devices transfer between departments, and (2) providing a transparent, verifiable record that all employees can view. A blockchain ledger is immutable - once a transfer of responsibility is recorded, it cannot be altered without detection, satisfying the 'secure record' requirement. Its distributed and transparent nature means any authorized employee can query the full device history. Option A (electronically signed equipment receipts) provides point-in-time signatures but lacks the continuous, queryable chain-of-custody visibility across all historical transfers. Option C (WAYF - Where Are You From) is a federated identity/authentication technology used in academic SSO contexts and is completely unrelated to asset tracking. Option D (context-aware authentication) manages access decisions based on contextual factors and has no relevance to device custody tracking.

Topics

#asset management#blockchain#chain of custody#device tracking

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice