nerdexam
CompTIA

CAS-005 · Question #39

Company A acquired Company В and needs to determine how the acquisition will impact the attack surface of the organization as a whole. Which of the following is the best way to achieve this goal?…

The correct answer is B. Documenting third-party connections used by Company B F. Performing an architectural review of Company B's network. To determine how the acquisition of Company B will impact the attack surface, the following steps Documenting third-party connections used by Company B: Understanding all external connections is essential for assessing potential entry points for attackers and ensuring that…

Submitted by rohit_dlh· Mar 6, 2026Security Architecture

Question

Company A acquired Company В and needs to determine how the acquisition will impact the attack surface of the organization as a whole. Which of the following is the best way to achieve this goal? (Choose two.)

Options

  • AImplementing DLP controls preventing sensitive data from leaving Company B's network
  • BDocumenting third-party connections used by Company B
  • CReviewing the privacy policies currently adopted by Company B
  • DRequiring data sensitivity labeling tor all files shared with Company B
  • EForcing a password reset requiring more stringent passwords for users on Company B's network
  • FPerforming an architectural review of Company B's network

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    51% (18)
  • C
    14% (5)
  • D
    26% (9)
  • E
    3% (1)

Explanation

To determine how the acquisition of Company B will impact the attack surface, the following steps Documenting third-party connections used by Company B: Understanding all external connections is essential for assessing potential entry points for attackers and ensuring that these connections are secure. Performing an architectural review of Company B's network: This review will identify vulnerabilities and assess the security posture of the acquired company's network, providing a comprehensive understanding of the new attack surface. These actions will provide a clear picture of the security implications of the acquisition and help in developing a plan to mitigate any identified risks.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice