Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 136–140 (page: 29)

Updated On: 10-Feb-2026

A security team received a regulatory notice asking for information regarding collusion and pricing from staff members who are no longer with the organization.
The legal department
provided the security team with a list of search terms to investigate.
This is an example of:

  1. due diligence.
  2. e-discovery.
  3. due care.
  4. legal hold.

Answer(s): B


Reference:

https://www.ansarada.com/due-diligence/hr



Which of the following protocols is a low power, low data rate that allows for the creation of PAN networks?

  1. Zigbee
  2. CAN
  3. DNP3
  4. Modbus

Answer(s): A


Reference:

https://urgentcomm.com/2007/11/01/connecting-on-a-personal-level/



An organization's assessment of a third-party, non-critical vendor reveals that the vendor does not have cybersecurity insurance and IT staff turnover is high. The organization uses the vendor to move customer office equipment from one service location to another. The vendor acquires customer data and access to the business via an API.
Given this information, which of the following is a noted risk?

  1. Feature delay due to extended software development cycles
  2. Financial liability from a vendor data breach
  3. Technical impact to the API configuration
  4. The possibility of the vendor's business ceasing operations

Answer(s): B


Reference:

https://legal.thomsonreuters.com/en/insights/articles/data-breach-liability



A company wants to quantify and communicate the effectiveness of its security controls but must establish measures. Which of the following is MOST likely to be included in an effective assessment roadmap for these controls?

  1. Create a change management process.
  2. Establish key performance indicators.
  3. Create an integrated master schedule.
  4. Develop a communication plan.
  5. Perform a security control assessment.

Answer(s): B



A bank is working with a security architect to find the BEST solution to detect database management system compromises. The solution should meet the following requirements:
-Work at the application layer
-Send alerts on attacks from both privileged and malicious users
-Have a very low false positive
Which of the following should the architect recommend?

  1. FIM
  2. WAF
  3. NIPS
  4. DAM
  5. UTM

Answer(s): D


Reference:

https://www.techtarget.com/searchitchannel/definition/database-activity-monitoring-DAM



Viewing page 29 of 127
Viewing questions 141 - 145 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!