CompTIA CAS-004 Online Practice Questions and Exam Preparation

CompTIA CAS-004 Online Questions & Answers

• Question 721:

  A company that uses AD is migrating services from LDAP to secure LDAP. During the pilot phase, services are not connecting properly to secure LDAP. Block is an except of output from the troubleshooting session:

  

  Which of the following BEST explains why secure LDAP is not working? (Select TWO.)

  A. The clients may not trust idapt by default.
  B. The secure LDAP service is not started, so no connections can be made.
  C. Danvills.com is under a DDoS-inator attack and cannot respond to OCSP requests.
  D. Secure LDAP should be running on UDP rather than TCP.
  E. The company is using the wrong port. It should be using port 389 for secure LDAP.
  F. Secure LDAP does not support wildcard certificates.
  G. The clients may not trust Chicago by default.
  E. The company is using the wrong port. It should be using port 389 for secure LDAP.
  G. The clients may not trust Chicago by default.

  ---

  Explanation

• Question 722:

  A cybersecunty engineer analyzed a system for vulnerabilities. The tool created an OVAL Results document as output Which of the following would enable the engineer to interpret the results in a human readable form? (Choose two.)

  A. Text editor
  B. OOXML editor
  C. Event Viewer
  D. XML style sheet
  E. SCAPtool
  F. Debugging utility
  D. XML style sheet
  E. SCAPtool

  ---

  Explanation

  An OVAL Results document is in XML format. To make it human-readable, an XML style sheet (XSLT) can format the data into a readable layout. SCAPtool is specifically designed to parse and display SCAP-related data, including OVAL results, in a user-friendly way.

• Question 723:

  Based on a recent security audit, a company discovered the perimeter strategy is inadequate for its recent growth. To address this issue, the company is looking for a solution that includes the following requirements:

  1.Collapse of multiple network security technologies into a single footprint

  2.Support for multiple VPNs with different security contexts

  3.Support for application layer security (Layer 7 of the OSI Model)

  Which of the following technologies would be the most appropriate solution given these requirements?

  A. NAT gateway
  B. Reverse proxy
  C. NGFW
  D. NIDS
  C. NGFW

  ---

  Explanation

  A Next-Generation Firewall (NGFW) is the best solution to meet the company's needs. NGFWs combine multiple security functions, such as VPN support, intrusion prevention, application-layer (Layer 7) inspection, and more, into a single

  device, simplifying network security management while improving security coverage. NGFWs can support multiple VPNs with different security contexts, which is critical for the company's requirement. CASP+ emphasizes NGFWs for their

  ability to collapse multiple security technologies into one platform and offer application-layer security, addressing modern perimeter security needs.

  References:

  CASP+ CAS-004 Exam Objectives: Domain 3.0 ?Enterprise Security Architecture (NGFW and Unified Security Technologies)

  CompTIA CASP+ Study Guide: NGFW and Perimeter Security Strategies

• Question 724:

  A security manager wants to transition the organization to a zero trust architecture. To meet this requirement, the security manager has instructed administrators to remove trusted zones, role-based access, and one-time authentication. Which of the following will need to be implemented to achieve this objective? (Choose three.)

  A. Least privilege
  B. VPN
  C. Policy automation
  D. PKI
  E. Firewall
  F. Continuous validation
  G. Continuous integration
  H. IaaS
  A. Least privilege
  C. Policy automation
  F. Continuous validation

  ---

  Explanation

• Question 725:

  A security architect is reviewing the following organizational specifications for a new application:

  1.Be sessionless and API-based

  2.Accept uploaded documents with PII, so all storage must be ephemeral

  3.Be able to scale on-demand across multiple nodes

  4.Restrict all network access except for the TLS port

  Which of the following ways should the architect recommend the application be deployed in order to meet security and organizational infrastructure requirements?

  A. Utilizing the cloud container service
  B. On server instances with autoscaling groups
  C. Using scripted delivery
  D. With a content delivery network
  A. Utilizing the cloud container service

  ---

  Explanation

  Deploying the application using a cloud container service aligns well with the specified security and organizational infrastructure requirements. It ensures sessionless, API-based operation, supports ephemeral storage for uploaded documents with PII, enables on-demand scalability across multiple nodes, and facilitates strict restriction of network access except for the TLS port.

• Question 726:

  Which of the following provides the best solution for organizations that want to securely back up the MFA seeds for its employees in a central, offline location with minimal management overhead?

  A. Key escrow service
  B. Secrets management
  C. Encrypted database
  D. Hardware security module
  D. Hardware security module

  ---

  Explanation

  An HSM provides a highly secure method for storing and managing cryptographic keys and other sensitive data, including MFA seeds. HSMs are designed to be tamper-resistant and are capable of securely generating, storing, and backing up cryptographic keys in an offline environment. Once configured, HSMs require minimal management overhead and provide robust security features, including physical security, to protect the stored data.

• Question 727:

  A security technician is investigating a system that tracks inventory via a batch update each night. The technician is concerned that the system poses a risk to the business, as errors are occasionally generated and reported inventory appears incorrect. The following output log is provided:

  

  The technician reviews the output of the batch job and discovers that the inventory was never less than zero, and the final inventory was 100 rather than 60.

  Which of the following should the technician do to resolve this issue?

  A. Ensure that the application is using memory-safe functions to prevent integer overflows.
  B. Recommend thread-safe processes in the code to eliminate race conditions.
  C. Require the developers to include exception handlers to accommodate out-of-bounds results.
  D. Move the batch processing from client side to server side to remove client processing inconsistencies.
  C. Require the developers to include exception handlers to accommodate out-of-bounds results.

• Question 728:

  An analyst received a list of IOCs from a government agency. The attack has the following characteristics:

  1.The attack starts with bulk phishing.

  2.If a user clicks on the link, a dropper is downloaded to the computer.

  3.Each of the malware samples has unique hashes tied to the user.

  The analyst needs to identify whether existing endpoint controls are effective. Which of the following risk mitigation techniques should the analyst use?

  A. Update the incident response plan.
  B. Blocklist the executable.
  C. Deploy a honeypot onto the laptops.
  D. Detonate in a sandbox.
  D. Detonate in a sandbox.

  ---

  Explanation

• Question 729:

  A corporation discovered its internet connection is saturated with traffic originating from multiple IP addresses across the internet. A security analyst needs to find a solution to address future occurrences of this type of attack.

  Which of the following would be the BEST solution to meet this goal?

  A. Implementing cloud-scrubbing services
  B. Upgrading the internet link
  C. Deploying a web application firewall
  D. Provisioning a reverse proxy
  A. Implementing cloud-scrubbing services

  ---

  Explanation

• Question 730:

  A mobile administrator is reviewing the following mobile device DHCP logs to ensure the proper mobile settings are applied to managed devices:

  

  Which of the following mobile configuration settings is the mobile administrator verifying?

  A. Service set identifier authentication
  B. Wireless network auto joining
  C. 802.1X with mutual authentication
  D. Association MAC address randomization
  D. Association MAC address randomization

  ---

  Explanation