nerdexam
ExamsCAS-003Questions#948
CompTIA

CAS-003 · Question #948

CAS-003 Question #948: Real Exam Question with Answer & Explanation

Sign in or unlock CAS-003 to reveal the answer and full explanation for question #948. The question stem and answer options stay visible for context.

Question

Company policy dictates that events from at least the past three months must be stored centrally for review. When a security incident occurs the security analyst investigates the underlying cause and sees the following: The error appears to have started five days ago at the centralized location. Which of the following would prevent this issue from reoccurring?

Options

  • ALog reduction and analysis
  • BHost-based IDS
  • CSCAP scanner
  • DFile integrity monitoring

Unlock CAS-003 to see the answer

You've previewed enough free CAS-003 questions. Unlock CAS-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full CAS-003 Practice