DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

CompTIA CAS-004 Exam Questions 2024 Updated: Get Ready for Exams, CompTIA CASP+ Certification | SPOTO

Prepare for your CompTIA CASP+ certification with our comprehensive practice tests. Our updated materials include exam questions and answers, ensuring you're fully equipped for success. With our free test samples, you can gauge your readiness and identify areas for improvement. Our exam dumps provide valuable insights into the exam format and content, giving you an edge on exam day. Take advantage of our mock exams and online exam questions to simulate real testing conditions. Whether you're seeking exam preparation or refining your skills, our exam simulator is your ultimate resource. Join the countless professionals who've achieved success with our trusted exam materials.
Take other online exams
Question #1
A small company needs to reduce its operating costs. vendors have proposed solutions, which all focus on management of the company’s website and services. The Chief information Security Officer (CISO) insist all available resources in the proposal must be dedicated, but managing a private cloud is not an option . Which of the following is the BEST solution for this company?
A. Community cloud service model
B. Multinency SaaS
C. Single-tenancy SaaS
D. On-premises cloud service model
View answer
Correct Answer: B
Question #2
A company processes data subject to NDAs with partners that define the processing and storage constraints for the covered data. The agreements currently do not permit moving the covered data to the cloud, and the company would like to renegotiate the terms of the agreements. Which of the following would MOST likely help the company gain consensus to move the data to the cloud?
A. Designing data protection schemes to mitigate the risk of loss due to multitenancy
B. Implementing redundant stores and services across diverse CSPs for high availability
C. Emulating OS and hardware architectures to blur operations from CSP view
D. Purchasing managed FIM services to alert on detected modifications to covered data
View answer
Correct Answer: A
Question #3
A security engineer has been asked to close all non-secure connections from the corporate network. The engineer is attempting to understand why the corporate UTM will not allow users to download email via IMAPS. The engineer formulates a theory and begins testing by creating the firewall ID 58, and users are able to download emails correctly by using IMAP instead. The network comprises three VLANs: The security engineer looks at the UTM firewall rules and finds the following: Which of the following should t
A. Contact the email service provider and ask if the company IP is blocked
B. Confirm the email server certificate is installed on the corporate computers
C. Make sure the UTM certificate is imported on the corporate computers
D. Create an IMAPS firewall rule to ensure email is allowed
View answer
Correct Answer: A
Question #4
The Chief information Officer (CIO) asks the system administrator to improve email security at the company based on the following requirements: * Transaction being requested by unauthorized individuals. * Complete discretion regarding client names, account numbers, and investment information. * Malicious attackers using email to malware and ransomeware. * Exfiltration of sensitive company information. The cloud-based email solution will provide anti-malware reputation-based scanning, signature-based scannin
A. Data loss prevention
B. Endpoint detection response
C. SSL VPN
D. Application whitelisting
View answer
Correct Answer: C
Question #5
Ann, a CIRT member, is conducting incident response activities on a network that consists of several hundred virtual servers and thousands of endpoints and users. The network generates more than 10,000 log messages per second. The enterprise belong to a large, web-based cryptocurrency startup, Ann has distilled the relevant information into an easily digestible report for executive management. However, she still needs to collect evidence of the intrusion that caused the incident . Which of the following sho
A. Traffic interceptor log analysis
B. Log reduction and visualization tools
C. Proof of work analysis
D. Ledger analysis software
View answer
Correct Answer: A
Question #6
A developer wants to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users. Which of the following would be BEST for the developer to perform? (Choose two.)
A. Utilize code signing by a trusted third party
B. Implement certificate-based authentication
C. Verify MD5 hashes
D. Compress the program with a password
E. Encrypt with 3DES
F. Make the DACL read-only
View answer
Correct Answer: A
Question #7
Over the last 90 days, many storage services has been exposed in the cloud services environments, and the security team does not have the ability to see is creating these instance. Shadow IT is creating data services and instances faster than the small security team can keep up with them. The Chief information security Officer (CIASO) has asked the security officer (CISO) has asked the security lead architect to architect to recommend solutions to this problem. Which of the following BEST addresses the prob
A. Compile a list of firewall requests and compare than against interesting cloud services
B. Implement a CASB solution and track cloud service use cases for greater visibility
C. Implement a user-behavior system to associate user events and cloud service creation events
D. Capture all log and feed then to a SIEM and then for cloud service events
View answer
Correct Answer: B
Question #8
A security architect is implementing a web application that uses a database back end. Prior to the production, the architect is concerned about the possibility of XSS attacks and wants to identify security controls that could be put in place to prevent these attacks. Which of the following sources could the architect consult to address this security concern?
A. SDLC
B. OVAL
C. IEEE
D. OWASP
View answer
Correct Answer: C
Question #9
A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization. Which of the following should be the analyst’s FIRST action?
A. Create a full inventory of information and data assets
B. Ascertain the impact of an attack on the availability of crucial resources
C. Determine which security compliance standards should be followed
D. Perform a full system penetration test to determine the vulnerabilities
View answer
Correct Answer: C
Question #10
A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass authentication and authorization. Which of the following actions would BEST resolve the issue? (Choose two.)
A. Conduct input sanitization
B. Deploy a SIEM
C. Use containers
D. Patch the OS
E. Deploy a WAF
F. Deploy a reverse proxy G
View answer
Correct Answer: C
Question #11
A security engineer estimates the company’s popular web application experiences 100 attempted breaches per day. In the past four years, the company’s data has been breached two times. Which of the following should the engineer report as the ARO for successful breaches?
A. 0
B. 8
C. 50
D. 36,500
View answer
Correct Answer: A
Question #12
The Chief information Officer (CIO) wants to establish a non-banding agreement with a third party that outlines the objectives of the mutual arrangement dealing with data transfers between both organizations before establishing a format partnership . Which of the follow would MOST likely be used?
A. MOU
B. OLA
C. NDA
D. SLA
View answer
Correct Answer: A
Question #13
An organization is designing a network architecture that must meet the following requirements: Users will only be able to access predefined services. Each user will have a unique allow list defined for access. The system will construct one-to-one subject/object access paths dynamically. Which of the following architectural designs should the organization use to meet these requirements?
A. Peer-to-peer secure communications enabled by mobile applications
B. Proxied application data connections enabled by API gateways
C. Microsegmentation enabled by software-defined networking
D. VLANs enabled by network infrastructure devices
View answer
Correct Answer: B
Question #14
A new web server must comply with new secure-by-design principles and PCI DSS. This includes mitigating the risk of an on-path attack. A security analyst is reviewing the following web server configuration: Which of the following ciphers should the security analyst remove to support the business requirements?
A. TLS_AES_128_CCM_8_SHA256
B. TLS_DHE_DSS_WITH_RC4_128_SHA
C. TLS_CHACHA20_POLY1305_SHA256
D. TLS_AES_128_GCM_SHA256
View answer
Correct Answer: B
Question #15
A security engineer thinks the development team has been hard-coding sensitive environment variables in its code. Which of the following would BEST secure the company’s CI/CD pipeline?
A. Utilizing a trusted secrets manager
B. Performing DAST on a weekly basis
C. Introducing the use of container orchestration
D. Deploying instance tagging
View answer
Correct Answer: A
Question #16
A security architect works for a manufacturing organization that has many different branch offices. The architect is looking for a way to reduce traffic and ensure the branch offices receive the latest copy of revoked certificates issued by the CA at the organization’s headquarters location. The solution must also have the lowest power requirement on the CA. Which of the following is the BEST solution?
A. Deploy an RA on each branch office
B. Use Delta CRLs at the branches
C. Configure clients to use OCSP
D. Send the new CRLs by using GPO
View answer
Correct Answer: C
Question #17
Which of the following terms refers to the delivery of encryption keys to a CASB or a third-party entity?
A. Key sharing
B. Key distribution
C. Key recovery
D. Key escrow
View answer
Correct Answer: B
Question #18
An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following: ERR_SSL_VERSION_OR_CIPHER_MISMATCH Which of the following is MOST likely the root cause?
A. The client application is testing PFS
B. The client application is configured to use ECDHE
C. The client application is configured to use RC4
D. The client application is configured to use AES-256 in GCM
View answer
Correct Answer: A

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.