nerdexam
CompTIA

CAS-005 · Question #475

A company must meet the following security requirements when implementing controls in order to be compliant with government policy: - Access to the system document repository must be MFA enabled…

The correct answer is A. Implementing a GRC tool. A Governance, Risk, and Compliance (GRC) tool integrates multifactor authentication for access control, provides dashboards for ongoing risk monitoring, and supports automated email notifications, fulfilling all specified requirements.

Submitted by ahmad_uae· Mar 6, 2026Governance, Risk, and Compliance

Question

A company must meet the following security requirements when implementing controls in order to be compliant with government policy:

  • Access to the system document repository must be MFA enabled.
  • Ongoing risk monitoring must be displayed on a system dashboard.
  • Staff must receive email notifications about periodic tasks.

Which of the following best meets all of these requirements?

Options

  • AImplementing a GRC tool
  • BConfiguring a privileged access management system
  • CLaunching a vulnerability management program
  • DCreating a risk register

How the community answered

(48 responses)
  • A
    83% (40)
  • B
    4% (2)
  • C
    2% (1)
  • D
    10% (5)

Explanation

A Governance, Risk, and Compliance (GRC) tool integrates multifactor authentication for access control, provides dashboards for ongoing risk monitoring, and supports automated email notifications, fulfilling all specified requirements.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice