nerdexam
CompTIA

CAS-005 · Question #2

A security analyst is reviewing the following log: Which of the following possible events should the security analyst investigate further?

Sign in or unlock CAS-005 to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.

Submitted by lucia.co· Mar 6, 2026Security Operations

Question

A security analyst is reviewing the following log:

Which of the following possible events should the security analyst investigate further?

Exhibits

CAS-005 question #2 exhibit 1
CAS-005 question #2 exhibit 2

Options

  • AA macro that was prevented from running
  • BA text file containing passwords that were leaked
  • CA malicious file that was run in this environment
  • DA PDF that exposed sensitive information improperly

Unlock CAS-005 to see the answer

You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full CAS-005 Practice