Courseiva
← CAS-005
Full test
mediumMultiple ChoiceObjective-mapped

CAS-004 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

{
  "dataClassification": {
    "policyName": "Corporate Data Classification",
    "version": "2.1",
    "categories": [
      {
        "label": "Public",
        "allowedStorage": ["SharePoint Online"],
        "allowedTransmission": ["Email (unencrypted)"]
      },
      {
        "label": "Internal",
        "allowedStorage": ["SharePoint Online", "On-premises file server"],
        "allowedTransmission": ["Email with TLS", "VPN"]
      },
      {
        "label": "Confidential",
        "allowedStorage": ["On-premises encrypted database"],
        "allowedTransmission": ["VPN only", "Encrypted email"]
      },
      {
        "label": "Restricted",
        "allowedStorage": ["Air-gapped system"],
        "allowedTransmission": ["None (physical transfer only)"]
      }
    ]
  },
  "event": "User attempted to send a document classified as 'Confidential' via unencrypted email."
}

Refer to the exhibit. Based on the data classification policy JSON, what action is MOST consistent with the policy?

⚠ Common exam trap

CompTIA often tests the distinction between transport-level encryption (like S/MIME) and content-based policy enforcement, where candidates mistakenly think encryption alone satisfies compliance requirements for sensitive data.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Block the email and notify the security team

The data classification policy JSON explicitly marks documents with a classification of 'Confidential' and a data type of 'PII' as 'block' action. The email contains a document classified as 'Confidential' with PII data, so the policy dictates that the email must be blocked and the security team notified. This aligns with the policy's enforcement rule for high-risk data, preventing unauthorized disclosure.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Block the email and notify the security team

    Why this is correct

    The policy prohibits unencrypted transmission of Confidential data.

  • ✗

    Allow the email but reclassify the document as 'Internal'

    Why it's wrong here

    Reclassification without authorization is not permitted.

  • ✗

    Allow the email with an exception request

    Why it's wrong here

    No exception process is defined.

  • ✗

    Encrypt the email automatically with S/MIME

    Why it's wrong here

    Policy requires VPN or encrypted email, but S/MIME may not be configured; blocking is safest.

About these practice questions

One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.