CompTIACompTIA
CAS-005 · Question #516
CAS-005 Question #516: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-005 to reveal the answer and full explanation for question #516. The question stem and answer options stay visible for context.
Submitted by marco_it· Mar 6, 2026Security Operations
Question
A company SIEM collects information about the log sources. Given the following report information: Which of the following actions should a security engineer take to enhance the security monitoring posture?
Options
- ACalibrate the timing on the log sources to enhance event correlation.
- BImplement a centralized use case library to get alerts based on the type of log sources.
- CPerform a non-reporting device assessment to collect missing log sources.
- DCreate a resiliency plan to prevent losing event logs from log sources.
Unlock CAS-005 to see the answer
You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.