Match each acronym to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Cloud Access Security Broker
Data Loss Prevention
Identity and Access Management
Security Information and Event Management
Security Orchestration, Automation, and Response
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
SIEM: Security Information and Event Management
The correct matches are: SIEM - Security Information and Event Management, SOAR - Security Orchestration, Automation and Response, DLP - Data Loss Prevention, IAM - Identity and Access Management, PAM - Privileged Access Management. Option F is incorrect because it incorrectly pairs SIEM with the definition for SOAR.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
SIEM: Security Information and Event Management
Why this is correct
SIEM is correctly defined as Security Information and Event Management, which aggregates and analyzes log data.
SOAR: Security Orchestration, Automation and Response
Why this is correct
SOAR is correctly defined as Security Orchestration, Automation and Response, enabling automated incident response.
DLP: Data Loss Prevention
Why this is correct
DLP is correctly defined as Data Loss Prevention, which monitors and protects data in use, in motion, and at rest.
IAM: Identity and Access Management
Why this is correct
IAM is correctly defined as Identity and Access Management, managing user identities and access rights.
PAM: Privileged Access Management
Why this is correct
PAM is correctly defined as Privileged Access Management, focusing on securing accounts with elevated permissions.
SIEM: Security Orchestration, Automation and Response
Why it's wrong here
Incorrect — this definition actually describes SOAR, not SIEM.
Go deeper
About these practice questions
Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.