mediumMultiple ChoiceObjective-mapped
CAS-004 Practice Question: A security analyst discovers that a third-party…
A security analyst discovers that a third-party vendor has been granted access to the company's production database for support purposes. The vendor's contract expires in two weeks. What is the BEST course of action to ensure compliance with the principle of least privilege and reduce risk?
⚠ Common exam trap
CompTIA often tests the misconception that monitoring or waiting until expiration is sufficient, but the trap here is that any unnecessary access, even if monitored, violates the principle of least privilege and increases risk.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Immediately revoke the vendor's database access and provide temporary access only if needed.
The principle of least privilege requires that access rights be granted only for the minimum necessary duration. Since the vendor's contract expires in two weeks, there is no ongoing business need for continued access. Immediately revoking access and providing temporary access only if needed ensures that the vendor cannot access the production database after the contract ends, reducing the risk of unauthorized data exposure or malicious activity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Immediately revoke the vendor's database access and provide temporary access only if needed.
Why this is correct
Immediate revocation aligns with least privilege and reduces risk.
- ✗
Extend the contract for another year to maintain support continuity.
Why it's wrong here
Extending does not address the immediate need to revoke access.
- ✗
Wait until the contract expires and then revoke access.
Why it's wrong here
Waiting leaves a period of unnecessary access and potential data exposure.
- ✗
Monitor the vendor's activities until the contract expires.
Why it's wrong here
Monitoring alone does not revoke access and still leaves a risk window.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.