nerdexam
CompTIA

CAS-005 · Question #144

During a recent assessment, a security analyst observed the following: Which of the following should the analyst use to address the vulnerabilities in the future?

The correct answer is C. Defense in depth. The question implies observing multiple vulnerabilities and asks for a comprehensive, proactive strategy to address them in the future.

Submitted by stefanr· Mar 6, 2026Security Architecture

Question

During a recent assessment, a security analyst observed the following:

Which of the following should the analyst use to address the vulnerabilities in the future?

Exhibits

CAS-005 question #144 exhibit 1
CAS-005 question #144 exhibit 2

Options

  • ASystem image hardening
  • BLeast privilege
  • CDefense in depth
  • DOS update

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    8% (4)
  • C
    86% (44)
  • D
    4% (2)

Why each option

The question implies observing multiple vulnerabilities and asks for a comprehensive, proactive strategy to address them in the future.

ASystem image hardening

System image hardening focuses on securing the base configuration of systems, which is one component of overall security, but not a comprehensive strategy for addressing various vulnerabilities in the future.

BLeast privilege

Least privilege is a security principle for assigning minimum necessary access rights, which helps mitigate risk from compromised accounts but isn't a broad strategy for addressing all types of vulnerabilities.

CDefense in depthCorrect

Defense in depth is a security strategy that involves layering multiple security controls across different protection surfaces, ensuring that if one control fails, another will still provide protection. This holistic approach is designed to address a wide range of potential vulnerabilities across various attack vectors, providing comprehensive future mitigation.

DOS update

OS update addresses specific known vulnerabilities in operating systems through patching, but it is a reactive measure and only one part of a comprehensive vulnerability management strategy.

Concept tested: Security strategy principles

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v2-defense-in-depth

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice