CAS-004 Exam Details

  • Exam Code
    :CAS-004
  • Exam Name
    :CompTIA Advanced Security Practitioner (CASP+)
  • Certification
    :CompTIA Certifications
  • Vendor
    :CompTIA
  • Total Questions
    :792 Q&As
  • Last Updated
    :May 28, 2026

CompTIA CAS-004 Online Questions & Answers

  • Question 421:

    A municipal department receives telemetry data from a third-party provider The server collecting telemetry sits in the municipal departments screened network and accepts connections from the third party over HTTPS. The daemon has a code execution vulnerability from a lack of input sanitization of out-of-bound messages, and therefore, the cybersecurity engineers would like to Implement nsk mitigations. Which of the following actions, if combined, would BEST prevent exploitation of this vulnerability? (Select TWO).

    A. Implementing a TLS inspection proxy on-path to enable monitoring and policy enforcement
    B. Creating a Linux namespace on the telemetry server and adding to it the servicing HTTP daemon
    C. Installing and configuring filesystem integrity monitoring service on the telemetry server
    D. Implementing an EDR and alert on Identified privilege escalation attempts to the SIEM
    E. Subscribing to a UTM service that enforces privacy controls between the internal network and the screened subnet
    F. Using the published data schema to monitor and block off nominal telemetry messages

  • Question 422:

    A control systems analyst is reviewing the defensive posture of engineering workstations on the shop floor. Upon evaluation, the analyst makes the following observations:

    1. Unsupported, end-of-life operating systems were still prevalent on the shop floor.

    2. There are no security controls for systems with supported operating systems.

    3. There is little uniformity of installed software among the workstations.

    Which of the following would have the greatest impact on the attack surface?

    A. Deploy antivirus software to all of the workstations.
    B. Increase the level of monitoring on the workstations.
    C. Utilize network-based allow and block lists.
    D. Harden all of the engineering workstations using a common strategy.

  • Question 423:

    A software company wants to build a platform by integrating with another company's established product. Which of the following provisions would be MOST important to include when drafting an agreement between the two companies?

    A. Data sovereignty
    B. Shared responsibility
    C. Source code escrow
    D. Safe harbor considerations

  • Question 424:

    A company hired a third party to develop software as part of its strategy to be quicker to market. The company's policy outlines the following requirements:

    The credentials used to publish production software to the container registry should be stored in a secure location.

    Access should be restricted to the pipeline service account, without the ability for the third-party developer to read the credentials directly.

    Which of the following would be the BEST recommendation for storing and monitoring access to these shared credentials?

    A. TPM
    B. Local secure password file
    C. MFA
    D. Key vault

  • Question 425:

    An organization wants to perform a scan of all its systems against best practice security configurations.

    Which of the following SCAP standards, when combined, will enable the organization to view each of the configuration checks in a machine-readable checklist format for fill automation? (Choose two.)

    A. ARF
    B. XCCDF
    C. CPE
    D. CVE
    E. CVSS
    F. OVAL

  • Question 426:

    A healthcare system recently suffered from a ransomware incident As a result the board of directors decided to hire a security consultant to improve existing network security. The security consultant found that the healthcare network was completely flat, had no privileged access limits and had open RDP access to servers with personal health information. As the consultant builds the remediation plan, which of the following solutions would BEST solve these challenges? (Select THREE).

    A. SD-WAN
    B. PAM
    C. Remote access VPN
    D. MFA
    E. Network segmentation
    F. BGP
    G. NAC

  • Question 427:

    While performing mandatory monthly patch updates on a production application server, the security analyst reports an instance of buffer overflow for a new application that was migrated to the cloud and is also publicly exposed. Security policy requires that only internal users have access to the application. Which of the following should the analyst implement to mitigate the issues reported? (Choose two.)

    A. Configure firewall rules to block all external traffic.
    B. Enable input validation for all fields.
    C. Enable automatic updates to be installed on all servers.
    D. Configure the security group to enable external traffic.
    E. Set up a DLP policy to alert for exfiltration on all application servers.
    F. Enable nightly vulnerability scans.

  • Question 428:

    During a phishing exercise, a few privileged users ranked high on the failure list. The enterprise would like to ensure that privileged users have an extra security-monitoring control in place. Which of the following is the MOST likely solution?

    A. A WAF to protect web traffic
    B. User and entity behavior analytics
    C. Requirements to change the local password
    D. A gap analysis

  • Question 429:

    An organization does not have visibility into when company-owned assets are off network or not connected via a VPN. The lack of visibility prevents the organization from meeting security and operational objectives. Which of the following cloud-hosted solutions should the organization implement to help mitigate the risk?

    A. Antivirus
    B. UEBA
    C. EDR
    D. HIDS

  • Question 430:

    Which of the following is the best reason to maintain visibility into vendor supply chains?

    A. To circumvent interdiction of shipments by nation-state actors
    B. To prevent clandestine tampering with components in transit
    C. To comply with import/export legal regulations
    D. To ensure the lowest possible price is quoted

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CompTIA exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CAS-004 exam preparations and CompTIA certification application, do not hesitate to visit our Vcedump.com to find your solutions here.