CS0-003 Reporting and Communication Practice Question
An analyst needs to collect evidence for a compliance audit. Which type of evidence is most appropriate to demonstrate that access reviews are performed regularly?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access review reports
Access review reports serve as direct evidence that reviews are conducted, showing dates and outcomes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Vulnerability scan reports
Why it's wrong here
Vulnerability scan reports identify unpatched software, misconfigurations, and known security weaknesses across network assets. While critical for vulnerability management compliance, they do not document identity governance processes or prove that periodic user access reviews were conducted by system owners.
- ✓
Access review reports
Why this is correct
Access review reports provide direct, auditable evidence that an organization regularly evaluates user permissions against the principle of least privilege. These reports document the specific reviewers, the dates of the evaluations, and the formal decisions to approve or revoke access rights, satisfying strict compliance mandates.
- ✗
Configuration backups
Why it's wrong here
Configuration backups preserve the operational state, rulesets, and settings of network devices or applications to facilitate disaster recovery and change management. They do not contain the procedural history, manager approvals, or decision-making logs required to demonstrate compliance with periodic access review policies.
- ✗
Log exports of user activity
Why it's wrong here
Log exports of user activity capture transactional events, authentication attempts, and resource access patterns for forensic analysis. Although they prove what actions a user performed, they fail to demonstrate that management actively reviewed and formally authorized those users' ongoing privilege levels during a compliance cycle.
Go deeper
Related to this question
Learn chapter
AWS CloudTrail and Azure Audit Log Analysis
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
One of 701 original CS0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.