CAS-005 Exam Dumps : CompTIA SecurityX Certification Exam

The best option is to provide sanitized devices with remote connections to a Virtual Desktop Infrastructure (VDI). This ensures that no sensitive intellectual property is stored locally on the laptops carried across borders. Even if the devices are inspected, seized, or tampered with, attackers cannot access corporate data since all sensitive files remain within secure, centralized infrastructure.

Option A (Measured Boot) reports firmware tampering but does not prevent data theft if the device is compromised. Option C (self-encrypting drives) protect data at rest but can be bypassed if customs agents demand login credentials. Option D (tamper-evident stickers) provide only physical inspection indicators and are ineffective against sophisticated data theft attempts.

CAS-005 emphasizes secure remote access strategies and temporary “clean laptops” for high-risk travel scenarios. Sanitized laptops with VDI access minimize exposure while maintaining productivity, making this the strongest mitigation.

A Content Delivery Network (CDN) caches and distributes static and dynamic web content across multiple geographically distributed edge servers, reducing latency for global users. This directly addresses page-loading delays caused by distance from the primary data centers.

RASP is for runtime application security, not latency.

Remote journaling is for data replication, not performance optimization.

SASE can improve security and WAN routing, but a CDN is purpose-built for content delivery performance.

Removing unnecessary services from existing endpoints reduces the attack surface by minimizing the number of potential vulnerabilities attackers could exploit. This is a cost-effective method to harden devices without requiring new purchases, aligning perfectly with a purchasing freeze. Deploying new EDR solutions or disposing of devices would likely conflict with the resource freeze, and reimaging systems does not address minimizing services proactively.