hardMultiple ChoiceObjective-mapped
CAS-004 Practice Question: A multinational corporation must comply with…
A multinational corporation must comply with multiple data protection laws. What is the BEST strategy?
⚠ Common exam trap
CompTIA CASP+ often tests the misconception that following local laws per region (Option C) is sufficient, but the trap is that this ignores the cost and complexity of managing multiple compliance frameworks and the risk of missing extraterritorial requirements like GDPR's broad territorial scope.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement the most stringent requirements across all regions
Implementing the most stringent requirements across all regions ensures compliance with the strictest data protection law (e.g., GDPR's Article 3 territorial scope, LGPD, or CCPA) without needing to track per-region variations. This approach reduces legal risk and operational complexity by applying a single, high-standard baseline that satisfies all applicable regulations, such as requiring explicit consent for data processing and 72-hour breach notification timelines.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a minimal baseline that meets all laws
Why it's wrong here
A minimal baseline may not satisfy stricter requirements.
- ✗
Follow only the laws of the home country
Why it's wrong here
This may violate other countries' laws.
- ✗
Follow local laws per region
Why it's wrong here
This may create operational complexity and potential conflicts.
- ✓
Implement the most stringent requirements across all regions
Why this is correct
This ensures compliance with the highest standards and reduces legal risk.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.