CompTIA CASP+ (CAS-003) — Question 256

An organization based in the United States is planning to expand its operations into the European market later in the year. Legal counsel is exploring the additional requirements that must be established as a result of the expansion. The BEST course of action would be to:

Answer options

• A. revise the employee provisioning and deprovisioning procedures
• B. complete a quantitative risk assessment
• C. draft a memorandum of understanding
• D. complete a security questionnaire focused on data privacy

Correct answer: B

Explanation

The correct answer is B because performing a quantitative risk assessment helps identify potential risks associated with the expansion into a new market. The other options, while relevant to operational changes, do not directly address the critical need to evaluate and mitigate risks that could arise from entering the European market.