CompTIA
CAS-005 · Question #2
A security analyst is reviewing the following log: Which of the following possible events should the security analyst investigate further?
Sign in or unlock CAS-005 to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.
Submitted by lucia.co· Mar 6, 2026Security Operations
Question
A security analyst is reviewing the following log:
Which of the following possible events should the security analyst investigate further?
Exhibits
Options
- AA macro that was prevented from running
- BA text file containing passwords that were leaked
- CA malicious file that was run in this environment
- DA PDF that exposed sensitive information improperly
Unlock CAS-005 to see the answer
You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

