CAS-004 Exam Details

  • Exam Code
    :CAS-004
  • Exam Name
    :CompTIA Advanced Security Practitioner (CASP+)
  • Certification
    :CompTIA Certifications
  • Vendor
    :CompTIA
  • Total Questions
    :792 Q&As
  • Last Updated
    :May 28, 2026

CompTIA CAS-004 Online Questions & Answers

  • Question 651:

    A company wants to refactor a monolithic application to take advantage of cloud native services and service microsegmentation to secure sensitive application components. Which of the following should the company implement to ensure the architecture is portable?

    A. Virtualized emulators
    B. Type 2 hypervisors
    C. Orchestration
    D. Containerization

  • Question 652:

    A company's claims processed department has a mobile workforce that receives a large number of email submissions from personal email addresses. An employees recently received an email that approved to be claim form, but it installed malicious software on the employee's laptop when was opened.

    A. Impalement application whitelisting and add only the email client to the whitelist for laptop in the claims processing department.
    B. Required all laptops to connect to the VPN before accessing email.
    C. Implement cloud-based content filtering with sandboxing capabilities.
    D. Install a mail gateway to scan incoming messages and strip attachments before they reach the mailbox.

  • Question 653:

    A company is looking at sending historical backups containing customer PII to a cloud service provider to save on storage costs. Which of the following is the MOST important consideration before making this decision?

    A. Availability
    B. Data sovereignty
    C. Geography
    D. Vendor lock-in

  • Question 654:

    A BIA of a popular online retailer identified several mission-essential functions that would take more than seven days to recover in the event of an outage. Which of the following should be considered when setting priorities for the restoration of these functions?

    A. Supply chain issues
    B. Revenue generation
    C. Warm-site operations
    D. Scheduled impacts to future projects

  • Question 655:

    The Chief Information Officer (CIO) wants to establish a non-binding agreement with a third party that outlines the objectives of the mutual arrangement dealing with data transfers between both organizations before establishing a formal partnership. Which of the following would MOST likely be used?

    A. MOU
    B. OLA
    C. NDA
    D. SLA

  • Question 656:

    A company created an external, PHP-based web application for its customers. A security researcher reports that the application has the Heartbleed vulnerability. Which of the following would BEST resolve and mitigate the issue? (Choose two.)

    A. Deploying a WAF signature
    B. Fixing the PHP code
    C. Changing the web server from HTTPS to HTTP
    D. Using SSLv3
    E. Changing the code from PHP to ColdFusion
    F. Updating the OpenSSL library

  • Question 657:

    A security team is creating tickets to track the progress of remediation. Which of the following is used to specify the due dates for high- and critical-priority findings?

    A. MSA
    B. SLA
    C. ISA
    D. MOU

  • Question 658:

    A financial institution has several that currently employ the following controls:

    1.The severs follow a monthly patching cycle.

    2.All changes must go through a change management process.

    3.Developers and systems administrators must log into a jumpbox to access the servers hosting the data using two-factor authentication.

    4.The servers are on an isolated VLAN and cannot be directly accessed from the internal production network.

    An outage recently occurred and lasted several days due to an upgrade that circumvented the approval process. Once the security team discovered an unauthorized patch was installed, they were able to resume operations within an hour. Which of the following should the security administrator recommend to reduce the time to resolution if a similar incident occurs in the future?

    A. Require more than one approver for all change management requests.
    B. Implement file integrity monitoring with automated alerts on the servers.
    C. Disable automatic patch update capabilities on the servers
    D. Enhanced audit logging on the jump servers and ship the logs to the SIEM.

  • Question 659:

    Which of the following is the primary reason that a risk practitioner determines the security boundary prior to conducting a risk assessment?

    A. To determine the scope of the risk assessment
    B. To determine the business owner(s) of the system
    C. To decide between conducting a quantitative or qualitative analysis
    D. To determine which laws and regulations apply

  • Question 660:

    During an incident, an employee's web traffic was redirected to a malicious domain. The workstation was compromised, and the attacker was able to modify sensitive data from the company file server. Which of the following solutions would have BEST prevented the initial compromise from happening? (Choose two.)

    A. DNSSEC
    B. FIM
    C. Segmentation
    D. Firewall
    E. DLP
    F. Web proxy

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CompTIA exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CAS-004 exam preparations and CompTIA certification application, do not hesitate to visit our Vcedump.com to find your solutions here.