Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 18 )

Updated On: 5-Mar-2026
Page 18 of 127
PDF with 645 Questions

An enterprise is deploying APIs that utilize a private key and a public key to ensure the connection string is protected. To connect to the API, customers must use the private key.
Which of the following would BEST secure the REST API connection to the database while preventing the use of a hard-coded string in the request string?

  1. Implement a VPN for all APIs.
  2. Sign the key with DSA.
  3. Deploy MFA for the service accounts.
  4. Utilize HMAC for the keys.

Answer(s): D


Reference:

https://eclipsesource.com/blogs/2016/07/06/keyed-hash-message-authentication-code-in-rest-apis/



An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Which of the following is MOST likely the root cause?

  1. The client application is testing PFS.
  2. The client application is configured to use ECDHE.
  3. The client application is configured to use RC4.
  4. The client application is configured to use AES-256 in GCM.

Answer(s): C


Reference:

https://kinsta.com/knowledgebase/err_ssl_version_or_cipher_mismatch/



An organization is designing a network architecture that must meet the following requirements:
-Users will only be able to access predefined services.
-Each user will have a unique allow list defined for access.
-The system will construct one-to-one subject/object access paths dynamically.
Which of the following architectural designs should the organization use to meet these requirements?

  1. Peer-to-peer secure communications enabled by mobile applications
  2. Proxied application data connections enabled by API gateways
  3. Microsegmentation enabled by software-defined networking
  4. VLANs enabled by network infrastructure devices

Answer(s): C



An organization developed a social media application that is used by customers in multiple remote geographic locations around the world. The organization's headquarters and only datacenter are located in New York City. The Chief Information Security Officer wants to ensure the following requirements are met for the social media application:
-Low latency for all mobile users to improve the users' experience
-SSL offloading to improve web server performance
-Protection against DoS and DDoS attacks
-High availability
Which of the following should the organization implement to BEST ensure all requirements are met?

  1. A cache server farm in its datacenter
  2. A load-balanced group of reverse proxy servers with SSL acceleration
  3. A CDN with the origin set to its datacenter
  4. Dual gigabit-speed Internet connections with managed DDoS prevention

Answer(s): C



A systems administrator is preparing to run a vulnerability scan on a set of information systems in the organization. The systems administrator wants to ensure that the targeted systems produce accurate information especially regarding configuration settings.
Which of the following scan types will provide the systems administrator with the MOST accurate information?

  1. A passive, credentialed scan
  2. A passive, non-credentialed scan
  3. An active, non-credentialed scan
  4. An active, credentialed scan

Answer(s): D



Viewing page 18 of 127
Viewing questions 86 - 90 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor