Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 20 )

Updated On: 5-Mar-2026
Page 20 of 127
PDF with 645 Questions

A company's product site recently had failed API calls, resulting in customers being unable to check out and purchase products. This type of failure could lead to the loss of customers and damage to the company's reputation in the market.
Which of the following should the company implement to address the risk of system unavailability?

  1. User and entity behavior analytics
  2. Redundant reporting systems
  3. A self-healing system
  4. Application controls

Answer(s): C



Which of the following represents the MOST significant benefit of implementing a passwordless authentication solution?

  1. Biometric authenticators are immutable.
  2. The likelihood of account compromise is reduced.
  3. Zero trust is achieved.
  4. Privacy risks are minimized.

Answer(s): B


Reference:

https://cloudworks.no/en/5-benefits-of-passwordless-authentication/



A review of the past year's attack patterns shows that attackers stopped reconnaissance after finding a susceptible system to compromise. The company would like to find a way to use this information to protect the environment while still gaining valuable attack information.
Which of the following would be BEST for the company to implement?

  1. A WAF
  2. An IDS
  3. A SIEM
  4. A honeypot

Answer(s): D


Reference:

https://www.kaspersky.com/resource-center/threats/what-is-a-honeypot



A security architect is reviewing the following proposed corporate firewall architecture and configuration:
Both firewalls are stateful and provide Layer 7 filtering and routing. The company has the following requirements:
-Web servers must receive all updates via HTTP/S from the corporate network.
Web servers should not initiate communication with the Internet.
-Web servers should only connect to preapproved corporate database servers.
-Employees' computing devices should only connect to web services over ports 80 and 443.
Which of the following should the architect recommend to ensure all requirements are met in the MOST secure manner? (Choose two.)

  1. Add the following to Firewall_A: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0/0 TCP 80,443
  2. Add the following to Firewall_A: 15 PERMIT FROM 192.168.1.0/24 TO 0.0.0.0 TCP 80,443
  3. Add the following to Firewall_A: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0/0 TCP/UDP 0-65535
  4. Add the following to Firewall_B: 15 PERMIT FROM 0.0.0.0/0 TO 10.0.0.0/16 TCP/UDP 0-65535
  5. Add the following to Firewall_B: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0 TCP/UDP 0-65535
  6. Add the following to Firewall_B: 15 PERMIT FROM 192.168.1.0/24 TO 10.0.2.10/32 TCP 80,443

Answer(s): A,F



As part of the customer registration process to access a new bank account, customers are required to upload a number of documents, including their passports and driver's licenses. The process also requires customers to take a current photo of themselves to be compared against provided documentation.
Which of the following BEST describes this process?

  1. Deepfake
  2. Know your customer
  3. Identity proofing
  4. Passwordless

Answer(s): C


Reference:

https://auth0.com/blog/what-is-identity-proofing-and-why-does-it-matter/



Viewing page 20 of 127
Viewing questions 96 - 100 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor