Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 14 )

Updated On: 5-Mar-2026
Page 14 of 127
PDF with 645 Questions

An organization recently experienced a ransomware attack. The security team leader is concerned about the attack reoccurring. However, no further security measures have been implemented.
Which of the following processes can be used to identify potential prevention recommendations?

  1. Detection
  2. Remediation
  3. Preparation
  4. Recovery

Answer(s): C



Some end users of an e-commerce website are reporting a delay when browsing pages. The website uses TLS 1.2. A security architect for the website troubleshoots by connecting from home to the website and capturing traffic via Wireshark. The security architect finds that the issue is the time required to validate the certificate. Which of the following solutions should the security architect recommend?

  1. Adding more nodes to the web server clusters
  2. Changing the cipher algorithm used on the web server
  3. Implementing OCSP stapling on the server
  4. Upgrading to TLS 1.3

Answer(s): C



A security engineer was auditing an organization's current software development practice and discovered that multiple open-source libraries were Integrated into the organization's software. The organization currently performs SAST and DAST on the software it develops.
Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?

  1. Perform additional SAST/DAST on the open-source libraries.
  2. Implement the SDLC security guidelines.
  3. Track the library versions and monitor the CVE website for related vulnerabilities.
  4. Perform unit testing of the open-source libraries.

Answer(s): C


Reference:

https://www.whitesourcesoftware.com/resources/blog/application-security-best-practices/



A security analyst is investigating a possible buffer overflow attack. The following output was found on a user's workstation: graphic.linux_randomization.prg
Which of the following technologies would mitigate the manipulation of memory segments?

  1. NX bit
  2. ASLR
  3. DEP
  4. HSM

Answer(s): B


Reference:

http://webpages.eng.wayne.edu/~fy8421/19sp-csc5290/labs/lab2-instruction.pdf
(3)



An e-commerce company is running a web server on premises, and the resource utilization is usually less than 30%. During the last two holiday seasons, the server experienced performance issues because of too many connections, and several customers were not able to finalize purchase orders. The company is looking to change the server configuration to avoid this kind of performance issue.
Which of the following is the MOST cost-effective solution?

  1. Move the server to a cloud provider.
  2. Change the operating system.
  3. Buy a new server and create an active-active cluster.
  4. Upgrade the server with a new one.

Answer(s): A



Viewing page 14 of 127
Viewing questions 66 - 70 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor